Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: 6xnGqVvDXpjxDZAzPHEVs8lgV/Caa3musAi2sWx/4k4=
Subject key identifier: E8:64:66:21:9C:20:44:1A:61:E2:3E:99:D0:3F:A4:88:77:35:47:C3
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 019749D59548B1C06E01605D42C6FE485EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: eOHQQD3s3Yrt+7jk6Hp9EMnMKztngPHRfCZr0ZQF01k=)
2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:95:48:b1:c0:6e:01:60:5d:42:c6:fe:48:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=e86466219c20441a61e23e99d03fa488773547c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:29:4a:ec:95:f6:93:37:0a:a7:1f:63:65:
58:81:04:e7:aa:5d:70:ee:b8:f8:6c:ef:a4:30:37:
fb:e7:53:13:d5:3e:c0:36:de:43:ff:61:22:73:14:
b4:9e:30:1b:76:ca:41:28:e8:87:b2:18:29:6d:53:
c3:3f:ed:a1:d3:ba:eb:6f:15:d1:08:41:d1:9a:8f:
47:1d:55:06:02:ea:78:3f:4b:47:bd:2c:56:47:4c:
e2:2a:d6:d7:cc:67:5c:df:d0:f3:23:22:ff:af:99:
0b:e0:c5:e4:9c:89:b3:36:16:75:8e:58:b4:28:0c:
00:a2:3a:93:f7:c6:cc:46:6e:94:37:4a:e2:3a:37:
ca:e3:96:5c:31:3e:16:4c:ae:c9:92:6d:68:83:d8:
8d:10:82:7e:19:dc:0e:46:44:27:d3:05:77:58:7d:
d4:12:52:73:c5:2a:1a:10:23:ad:5f:3f:3c:c3:94:
4f:b7:04:6e:23:03:0a:99:06:f8:6a:4d:bf:ed:5b:
5a:c4:7a:55:7d:5f:8a:d0:c9:45:a7:06:30:b6:0e:
71:9c:05:6a:7b:76:aa:90:41:76:ba:ea:dc:0d:e8:
92:1e:43:b3:82:59:02:37:b4:be:cb:44:37:65:bf:
51:24:c9:50:ee:46:81:dd:5e:0e:4f:37:50:98:4c:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:66:21:9C:20:44:1A:61:E2:3E:99:D0:3F:A4:88:77:35:47:C3
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:c4:a5:5b:3b:8d:b6:d6:d9:fb:5a:85:fa:8b:62:76:4e:
2e:1d:3c:8b:74:3f:a5:f2:d8:e3:a5:2e:6d:06:3a:87:eb:5a:
00:40:05:b5:e0:05:6c:7e:ff:ba:9a:2d:34:73:ef:f0:4e:8c:
9c:e4:b7:f8:85:7a:f9:67:5e:cf:dd:15:76:34:0f:2f:f4:79:
82:64:33:ed:86:4a:a3:16:6e:d9:30:3a:0c:c0:02:96:6a:11:
e4:75:0c:d2:5f:9c:40:fd:ba:c5:01:f3:ac:ca:ee:c1:95:f4:
73:af:1b:54:d7:6d:c7:ec:9a:e6:92:5b:de:a3:80:cf:d9:15:
e7:d6:b0:70:91:cb:01:84:97:d5:39:1e:87:e4:b4:f8:10:a6:
75:b4:cf:59:7e:98:10:9a:da:f9:9f:de:d5:72:c4:32:f1:bc:
27:39:9d:0e:f3:37:9b:01:94:0e:53:00:b6:2e:e1:50:97:8d:
88:19:fe:7c:d1:b4:43:96:75:0f:77:78:a9:0b:45:61:d3:1b:
92:94:3b:68:bc:90:7a:8b:b6:dd:4b:6c:3e:67:60:d7:f0:d0:
54:d9:fb:11:8a:05:72:0a:a2:95:10:17:13:dc:08:17:3b:25:
95:95:28:5f:f5:44:95:c6:ee:27:b7:12:ad:e6:d9:ac:d3:28:
13:f2:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:41:19 2025 by rpki-client