Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: lMW0Y5v5SlMNC/ckl7uHaL8lwjtC7PBZokn0+KNkgtU=
Subject key identifier: 7A:8D:58:7B:3F:1C:28:29:45:ED:90:42:BE:8E:DC:A9:23:C8:81:5B
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 01976BBD882D8D4BB480F954B5BEFD0A2AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:01:12 +0000
Manifest this update: Sat 14 Jun 2025 00:01:12 +0000
Manifest next update: Sun 15 Jun 2025 00:01:12 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: hn9B8axpZtDGxF9uibdLceddYy7tnotsgU/GoMmvQEs=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:88:2d:8d:4b:b4:80:f9:54:b5:be:fd:0a:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Jun 14 00:01:12 2025 GMT
Not After : Jun 15 00:01:12 2025 GMT
Subject: CN=7a8d587b3f1c282945ed9042be8edca923c8815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:cf:9a:c8:a3:3a:22:4d:a4:b3:ab:b4:82:
b9:a5:0d:b7:3d:6a:39:03:d7:7c:b1:fc:b6:b4:69:
33:7e:8b:e9:4c:6e:38:74:d4:2f:14:de:24:fd:ab:
9e:ba:b7:63:3f:ba:96:47:33:ec:ef:41:15:51:0c:
8b:a6:c8:a0:72:1f:00:fd:95:f2:bb:79:0f:5e:e1:
91:82:4f:04:b7:90:6d:87:d7:3e:42:38:31:3a:80:
f6:16:d7:bc:04:a5:c9:04:d2:53:7c:72:68:f5:c5:
86:b9:aa:20:48:01:60:54:8c:90:04:13:e7:0d:d6:
81:09:fa:68:e4:61:b6:c9:8e:90:2e:81:3a:6b:f2:
92:11:4d:75:92:3e:5e:be:c3:a4:f3:f1:e6:e6:6a:
48:bb:61:b4:80:ee:ed:06:6e:41:33:fd:c4:dc:f9:
c5:aa:e3:d7:1b:d9:e2:e4:e8:0f:2d:fc:0d:d0:cc:
04:ac:1d:d4:4a:0e:cc:45:9d:17:8e:8d:fb:19:1a:
95:88:02:a8:74:06:9f:0d:05:0a:f6:b2:32:aa:3a:
74:3f:72:ba:87:6d:fd:49:41:54:06:f4:f1:b4:65:
7e:6b:af:d2:a3:69:98:24:37:62:a1:58:74:8e:ce:
ed:2e:cd:fc:f4:bb:85:78:b8:33:a3:1f:f7:e4:84:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:58:7B:3F:1C:28:29:45:ED:90:42:BE:8E:DC:A9:23:C8:81:5B
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:09:f8:1b:b9:6c:55:51:a4:52:25:7f:43:74:02:55:d6:
1c:d0:ca:74:be:0d:57:14:05:f4:a0:a7:d6:cd:f0:a6:02:91:
08:6d:60:7c:44:0b:34:86:e4:df:9e:b9:a0:66:7d:d1:0f:55:
84:d7:20:e6:11:e5:2f:5c:d0:9f:94:58:9b:a5:ea:99:ce:95:
91:a2:9d:9f:da:03:f1:29:3b:ef:f7:62:0e:b4:be:c0:bd:cd:
9e:85:f4:2a:01:6a:d0:e6:12:4f:d6:4c:4a:4a:24:ef:ba:04:
81:1d:cb:25:b1:60:71:cb:50:f6:19:79:11:6f:04:db:3f:32:
37:fe:a1:6d:a6:93:2b:95:71:d8:b9:34:e9:b4:9d:80:08:12:
78:b0:1c:f3:88:f1:dd:23:6c:0a:4b:2f:88:98:00:e8:98:d4:
70:46:56:c7:51:64:ad:3a:5c:a2:02:16:4e:80:95:67:6e:2e:
5e:51:81:ff:66:c7:4a:f7:81:7a:c1:28:70:df:94:44:c9:23:
d6:cf:6d:1e:e7:a7:60:7e:8f:26:a8:92:d2:ad:05:82:d7:63:
74:1e:b2:3e:f5:ef:68:e9:9c:5b:ab:d1:93:c0:08:bc:1f:5b:
0b:20:da:d9:c7:3d:8b:27:97:e9:38:75:77:82:80:1e:f5:c9:
86:bb:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:48:15 2025 by rpki-client