Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: ZAo/A5rgWqjE92QguTvIWyl55mu45zOnBaX1BajvaEs=
Subject key identifier: 9C:79:6D:F4:EE:FC:D4:11:2E:56:0A:AF:46:EE:45:BB:76:18:22:6D
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 01976395C230E48EFF82D1436827438286C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 10:00:48 +0000
Manifest this update: Thu 12 Jun 2025 10:00:48 +0000
Manifest next update: Fri 13 Jun 2025 10:00:48 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: ui2NYK+39hg2ZXDUUCNd10vOVW8YDEXKbzE2qZdx0Pg=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:c2:30:e4:8e:ff:82:d1:43:68:27:43:82:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jun 12 10:00:48 2025 GMT
Not After : Jun 13 10:00:48 2025 GMT
Subject: CN=9c796df4eefcd4112e560aaf46ee45bb7618226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:29:2e:fd:cd:a2:5b:c8:01:85:b9:21:d9:
bb:0c:f5:cb:18:d8:a3:cf:cd:25:b9:76:66:8f:1a:
b8:61:6e:07:ff:b3:20:70:26:88:13:a3:58:88:0b:
d0:82:6f:b3:57:76:b3:78:b9:3a:8c:b5:da:53:fb:
f7:60:4e:53:ba:ac:97:b7:80:e6:95:4d:61:d6:1d:
7b:12:67:0d:ab:14:73:e3:d6:ad:e1:22:7c:3f:ed:
50:23:61:93:b3:4a:0e:cd:42:78:ad:8d:85:0c:5d:
ab:25:c3:bd:8b:ba:ab:f4:a4:94:42:c4:32:a3:b8:
09:38:6a:d7:f5:3a:d2:2a:81:2f:25:79:39:5c:6b:
ee:50:13:c0:e3:c9:cf:30:24:8a:dd:cf:8f:cb:0b:
33:97:69:9b:0b:53:da:cd:80:96:b8:d6:dd:6e:bf:
d7:ca:c9:b6:0b:8c:99:a7:9b:86:4a:8a:20:a5:aa:
65:f4:2d:63:a9:3a:59:3f:d0:b6:06:74:87:f6:47:
eb:78:e0:19:02:1b:24:04:fe:9a:f6:9b:09:9a:81:
eb:bc:31:a2:95:26:80:18:33:17:47:ff:87:5b:b4:
39:90:48:d0:16:dc:89:92:79:33:2a:b9:cf:a5:4a:
79:8b:c6:3a:2c:98:b6:fe:2c:09:ac:3e:d4:3a:84:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:6D:F4:EE:FC:D4:11:2E:56:0A:AF:46:EE:45:BB:76:18:22:6D
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e6:c3:e5:f1:73:5d:fd:32:8b:2b:e5:49:2b:f7:2f:96:f4:
84:96:cb:6f:68:07:dc:60:96:2e:c3:bf:59:e1:cb:b4:27:56:
1c:f5:b7:4b:b8:1f:00:52:75:80:ce:cf:42:3d:34:e5:22:b8:
e2:87:cc:59:60:30:4b:39:ad:fa:b9:15:2d:c0:d3:d1:24:3c:
86:e4:12:d5:ce:08:7f:9b:e7:9e:fd:fa:86:38:47:34:f9:77:
1d:31:77:e9:d1:33:49:ad:81:60:5e:2b:77:f5:a0:8a:0b:0f:
94:cf:24:8b:2b:46:6a:44:86:a3:3b:f0:5f:ac:ea:a8:d9:6b:
9f:55:dd:23:b7:6e:40:af:5d:cc:7b:87:90:56:5e:5a:2c:90:
70:c0:ce:24:3a:3b:07:94:51:75:84:28:b7:48:6f:b2:a7:2b:
9a:b2:1d:6b:7b:07:fc:27:4a:a1:9e:da:7b:c8:f6:d4:b6:b5:
be:42:55:ce:72:2e:dd:4b:3c:f2:03:2e:ce:53:fc:26:f3:65:
f6:a2:02:d5:1f:e3:ce:1c:40:a2:26:f2:05:9f:b9:45:d5:3d:
3a:21:2b:95:a5:3c:d0:4d:16:c6:9a:21:6d:fb:e1:b2:ba:5f:
41:46:63:33:bd:75:21:28:4b:ce:73:bc:1a:ed:a5:8b:5b:5c:
b1:5e:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:38:54 2025 by rpki-client