Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: Taai2Knwa0kVy1zUgGwTOi4Wy7Zj3vBZpICbysWRb0c=
Subject key identifier: 2A:6E:7D:85:24:61:21:5F:73:68:D5:2C:DA:C5:64:61:51:08:DA:0B
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019749317951F5AD2061C54E33DC042D2F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: Eeje3EFDC/D4Wlfladai1fqE9rS1JQQ0eAupnWtkFjs=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:79:51:f5:ad:20:61:c5:4e:33:dc:04:2d:2f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=2a6e7d852461215f7368d52cdac564615108da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:4c:b6:16:3b:58:b3:5f:35:bb:e4:fe:13:
87:0c:57:68:54:ec:46:25:9e:c6:9f:ac:a0:55:94:
de:ec:06:74:b7:46:f6:52:6c:ae:89:60:b1:05:10:
d4:be:90:d6:5a:89:38:a0:6c:59:e4:9c:88:6a:54:
93:e2:48:31:b6:71:7a:a1:d1:fb:c5:6a:f3:ca:bf:
25:ee:cb:f8:89:66:6d:c3:d4:d9:4a:98:97:f3:0a:
62:44:cc:65:d4:ef:09:74:6f:2a:5f:72:25:ad:30:
76:f8:95:80:12:8c:14:d2:d2:9f:7d:a0:fc:f6:ce:
4a:f9:c3:5f:14:57:47:25:bb:5f:7c:41:e9:54:e5:
57:c2:2f:93:c3:0b:40:8a:00:d6:b4:92:73:d3:fd:
f4:e3:7d:49:71:cb:61:25:dc:53:3d:9d:dd:69:82:
f0:4a:e6:7a:62:c5:66:7a:c2:f7:70:a1:82:be:03:
20:d7:c7:8a:ee:19:3b:67:b5:0e:13:0d:66:4b:89:
22:59:63:00:e0:90:86:1f:16:0a:de:d9:ea:eb:cb:
14:8e:a5:22:57:06:47:d4:2c:1b:46:98:ea:54:d6:
b8:ee:e0:87:5c:26:9e:0f:f4:cf:db:4c:43:cc:11:
aa:f6:bc:e5:c6:09:b4:a0:e8:d3:55:53:8a:c4:a3:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:7D:85:24:61:21:5F:73:68:D5:2C:DA:C5:64:61:51:08:DA:0B
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:59:f1:69:bb:05:dd:09:8e:df:ff:68:09:6c:90:ae:fd:
b8:d4:49:1a:ad:72:93:64:90:9a:e6:c1:f1:03:27:e6:e8:4b:
8b:bc:cf:a2:36:85:49:ab:b5:44:3e:61:72:ed:3a:98:40:89:
6f:05:41:04:73:08:30:c4:1e:13:77:62:23:7e:80:d8:df:7d:
ff:69:e1:00:d3:f2:26:ed:92:a3:7d:8e:4b:81:71:be:22:8c:
53:c0:1c:d5:74:e0:02:98:96:0d:79:82:63:22:47:c5:d4:a2:
c2:e1:40:51:26:d6:c6:a4:30:18:04:3c:f9:03:36:77:ec:48:
ae:db:54:ab:b9:22:a5:f1:6e:9d:94:1b:33:1a:91:56:7a:36:
f1:e0:3b:cb:54:51:95:f9:b0:a0:17:38:37:ac:91:fc:a9:cb:
e0:60:f7:74:44:a6:82:db:9a:f5:cc:dd:01:5a:5c:6f:67:45:
ef:85:c0:5a:44:62:2c:ce:60:11:e0:90:ef:4b:7a:8e:47:53:
d3:5b:60:4f:6e:00:77:5c:b3:7b:1a:6c:0c:a2:15:51:50:17:
8b:e6:b7:6e:af:a7:a7:e1:f9:21:cf:1a:dc:ee:6c:b3:a4:1f:
2f:da:35:4e:3a:2c:b5:44:40:8a:45:c3:3c:cb:cd:b3:d0:52:
de:3f:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:41 2025 by rpki-client