Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: LGBaCf4uIOljBciXbBHMy/3bm826V3XHlL6rJ7+AsSs=
Subject key identifier: 0C:B8:9B:75:F5:4C:EA:4B:87:44:F4:41:40:EE:16:26:01:CE:38:72
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 01974A436DF5E78CA11B5663493C557D4513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: ocWZGLevIKwoIKG6Lq58H7+5UvOaM/c1Zp515KzZsfk=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6d:f5:e7:8c:a1:1b:56:63:49:3c:55:7d:45:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=0cb89b75f54cea4b8744f44140ee162601ce3872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:ac:88:be:71:b8:6c:9c:f4:d1:b6:72:9d:
c3:7e:a9:18:a6:60:14:84:4a:82:f0:3e:c8:26:e0:
e8:1b:8e:05:89:a9:0c:f5:fc:d2:af:af:62:8c:67:
60:de:b7:e0:ba:6d:61:d5:9f:2c:33:67:cb:c2:3a:
68:02:fc:23:2b:57:74:18:41:6d:7b:77:fd:0a:5a:
1e:a7:d5:0e:94:40:64:ac:c7:2c:a8:c7:ca:4f:81:
0b:76:d6:21:13:20:f9:63:c0:11:6a:fb:89:bb:9f:
5e:34:b2:fc:1a:13:05:cd:f8:af:32:c0:58:1e:6e:
26:63:6e:db:d9:ea:e0:01:dc:6b:23:25:03:5e:c3:
4c:9e:54:2e:03:57:c1:cc:5c:3d:d9:e8:f2:e6:dd:
d7:04:45:a7:22:03:a3:c7:6d:09:ed:25:a9:da:b5:
ab:85:68:00:13:f8:e0:77:cf:c7:af:d8:69:73:bd:
e5:5a:13:fd:75:d5:73:b5:55:26:31:df:ed:82:0e:
6e:f4:6f:4a:d2:5d:17:4f:df:56:93:65:87:63:e6:
61:9b:4f:fa:57:b0:74:5a:e9:50:bd:75:ca:3f:1c:
3d:79:a6:55:a8:38:47:44:2f:b3:48:dc:70:83:c9:
9d:ff:42:aa:cf:95:22:46:e1:ee:19:b0:43:ce:b4:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:9B:75:F5:4C:EA:4B:87:44:F4:41:40:EE:16:26:01:CE:38:72
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:1d:f9:28:58:d2:b1:9f:13:46:ba:7f:21:76:1b:e9:e7:
b2:a5:cd:01:c9:cd:6e:9f:99:44:dd:f6:c4:10:b3:93:70:6e:
73:3b:68:3e:bb:c4:28:0c:90:51:7a:02:ee:35:8e:be:b1:53:
3a:57:99:44:1e:fb:12:af:7e:17:2e:2d:ed:41:3b:a9:fe:22:
11:52:11:57:3f:66:bf:9a:41:79:56:2f:60:26:9e:52:ce:a8:
21:bb:7d:f8:9b:2c:18:fe:c2:3a:0b:43:2a:1c:05:c3:ce:01:
a3:f9:78:73:e4:41:cc:e2:68:2d:70:85:90:ac:e2:69:ee:21:
48:a2:f7:9e:2a:a1:0f:2b:d2:1b:7c:5a:d3:05:20:45:20:88:
e9:2f:66:0f:87:6f:b2:e2:6f:14:00:29:c3:97:95:7d:37:f0:
fa:01:5a:a1:e3:d5:f1:5c:da:9a:89:b7:cc:b1:24:04:b9:79:
d2:9e:dc:f7:41:a8:7d:15:96:af:a7:05:07:21:25:a3:57:07:
a3:eb:2b:76:d9:08:34:0f:9f:97:f3:31:40:f8:c6:77:6d:f3:
fb:51:cb:76:f9:b6:f8:48:80:85:b2:eb:55:a3:18:51:86:13:
60:18:a7:fc:cf:d6:0c:d8:a1:2e:05:7b:cc:a5:b9:72:e5:e1:
74:c6:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:00 2025 by rpki-client