Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: cVnGa6yQ6C/b2eLa58SuVRgzmfvwFaZ0HtKhmgc7A5o=
Subject key identifier: 89:40:AB:BC:22:C2:A4:D6:6A:50:EA:60:B3:CB:6F:7A:BE:2A:AD:F7
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 01974DE9813CCD7CABBE0CFF0D542E929EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:00:38 +0000
Manifest this update: Sun 08 Jun 2025 05:00:38 +0000
Manifest next update: Mon 09 Jun 2025 05:00:38 +0000
Files and hashes: 1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=)
2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: CmTJUiYz5vQBh2kKp8Ol/hJxReB5LnMB0obQC4mnCM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:81:3c:cd:7c:ab:be:0c:ff:0d:54:2e:92:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Jun 8 05:00:38 2025 GMT
Not After : Jun 9 05:00:38 2025 GMT
Subject: CN=8940abbc22c2a4d66a50ea60b3cb6f7abe2aadf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:1c:85:32:c7:4d:42:15:2c:b0:d7:39:08:
a7:08:08:7d:79:4d:0c:3b:f7:00:8b:fe:dd:a1:ef:
49:ec:11:d7:48:0c:f5:29:36:a5:93:ea:c4:9d:77:
b9:00:4e:a1:5b:30:bd:e9:ea:7b:75:11:81:35:cc:
b4:e4:9f:e6:f3:a5:27:6e:9e:1d:ab:ad:e3:27:c5:
cc:ea:bc:86:c7:a1:ea:7b:b0:1a:93:be:76:ad:33:
8d:4f:0a:39:35:ed:e8:55:3a:85:6d:b9:f4:8a:4d:
a4:92:b5:20:3b:94:86:58:59:67:ec:15:b4:a5:62:
8a:41:89:e4:86:c2:68:63:e8:c2:08:81:c8:38:f9:
34:d7:9e:a7:00:77:ef:84:89:d9:f9:3c:4b:a7:89:
06:14:0e:c7:29:31:51:21:13:d0:6d:27:e9:fb:4b:
0f:94:29:5e:44:86:f5:47:65:6a:bd:53:4b:50:ca:
49:84:f6:14:37:cd:32:3f:fa:40:9c:97:c7:48:4c:
d4:30:7c:90:b5:5a:2e:79:ad:ca:64:4f:fa:6e:50:
c9:e4:a4:c2:b6:6a:42:a2:11:5b:51:f7:70:3b:22:
03:33:13:65:da:7d:03:0b:cc:6f:11:8b:e5:b2:1c:
b2:a3:7e:bd:bf:1d:72:84:3e:c3:f7:78:21:9b:21:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:AB:BC:22:C2:A4:D6:6A:50:EA:60:B3:CB:6F:7A:BE:2A:AD:F7
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:df:19:83:00:c8:e4:2f:d3:8e:b8:40:93:4f:fa:57:47:e1:
71:0d:7a:c8:e2:5b:aa:7e:09:64:bc:23:76:60:0d:b4:0c:89:
67:f9:11:61:e7:21:0e:3a:7b:a0:bf:94:b5:d5:cc:44:1c:82:
62:0f:5b:f0:f0:6a:a4:de:c6:d2:ae:fc:8f:d8:e4:25:4c:af:
5c:18:d8:63:13:e1:3b:f4:a2:7f:92:f3:f3:14:26:f0:d7:da:
5f:88:b7:3a:5c:95:71:cb:06:cd:4f:5d:12:ed:6a:fb:d4:1c:
8c:91:60:87:81:46:39:c2:6e:c0:40:a5:68:a8:fb:cb:67:ea:
94:40:7e:43:cb:58:da:fa:cb:85:bb:ac:b5:89:e3:04:86:11:
a4:32:fb:8d:11:5d:b1:51:c3:71:bb:e4:5c:11:ac:40:36:71:
db:32:f9:77:0f:42:2f:e2:50:27:02:42:00:50:55:a4:ec:fb:
de:6b:d5:8d:4c:9d:08:90:d1:d8:0c:13:ee:55:5f:6c:7d:82:
08:b7:5f:c7:2f:a3:7b:ac:2d:cf:ef:45:db:60:a4:14:ac:78:
31:64:9b:61:02:12:e4:88:be:e0:43:6b:2e:e0:dc:6c:38:d1:
f9:71:f8:41:f9:95:68:cc:55:49:8e:fd:56:de:27:91:12:1f:
6c:1d:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:59 2025 by rpki-client