Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: V13VozoJ0c+qASG3vb91HvqThZ/KE7gYyzVrX0C2V+U=
Subject key identifier: EC:83:6A:CE:A9:A9:20:1D:C3:5D:B7:FB:E1:19:01:53:5D:92:94:87
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 019747B0CE5B6D46095BAB390F2400D77F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 158C
Signing time: Sat 07 Jun 2025 00:00:58 +0000
Manifest this update: Sat 07 Jun 2025 00:00:58 +0000
Manifest next update: Sun 08 Jun 2025 00:00:58 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: KWzE2mS5miwUKnIimj+0eyIh63HWHv1bxW1YH0DWJ24=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:ce:5b:6d:46:09:5b:ab:39:0f:24:00:d7:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jun 7 00:00:58 2025 GMT
Not After : Jun 8 00:00:58 2025 GMT
Subject: CN=ec836acea9a9201dc35db7fbe11901535d929487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:aa:2f:85:7c:20:6a:da:cc:9c:b0:12:cb:
d0:b8:71:a3:f0:63:dc:94:99:8b:0d:76:b3:8b:57:
9c:46:5e:3c:ba:7f:c8:48:5b:d5:c4:9f:6b:97:84:
81:77:6a:df:8b:99:83:b2:73:ca:4b:0d:30:0a:25:
be:1b:36:ff:a2:5a:7b:f7:43:67:71:30:79:16:8c:
7d:7b:d0:48:d2:cc:23:9f:00:6c:16:0e:d7:e3:57:
86:81:4e:0a:f1:f7:8f:1e:08:36:b5:dc:2c:a2:2d:
d9:c3:c6:33:34:32:28:1f:01:f2:d1:6b:d2:6a:51:
68:87:03:ec:c8:b7:ec:0f:bb:39:2e:94:db:4f:2d:
e7:6a:bf:a1:66:f8:82:78:c3:44:b6:05:fa:27:90:
c4:72:e1:a3:c6:1e:3c:14:94:fe:a4:89:6b:54:2e:
ff:a0:9f:5d:b2:9d:04:50:d0:5d:96:59:f9:94:43:
f7:ea:32:d6:59:12:e3:17:ad:d8:86:5b:e8:a2:f4:
10:e7:8f:4f:b2:3c:9a:91:1e:a2:44:cb:60:2c:41:
50:95:32:6a:49:e9:3a:fb:be:85:9c:38:45:d0:b6:
bc:cb:3c:32:8d:83:7e:b5:ad:39:7c:65:49:b5:7b:
7f:0f:24:3e:d8:37:6c:60:14:90:c8:cf:1d:f1:c1:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:6A:CE:A9:A9:20:1D:C3:5D:B7:FB:E1:19:01:53:5D:92:94:87
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:24:3c:8e:98:2a:cb:c6:53:55:09:68:3f:46:2c:88:49:
3f:73:7c:96:40:01:33:d7:4f:1e:19:50:ee:0c:e1:27:9d:83:
81:54:9f:94:7f:af:04:b0:ae:50:73:5b:de:79:f2:93:35:fe:
3f:f5:e1:15:70:0a:93:47:cf:e5:13:ac:0e:5e:57:4a:7e:89:
63:66:2a:b1:8c:48:43:18:f1:db:71:58:3a:48:f8:c3:f9:02:
82:e9:6d:e4:e8:72:ae:9b:e9:c4:3f:6d:f7:30:e9:a6:3f:67:
b1:23:b8:0c:5f:08:08:bb:4b:f8:df:4a:22:6a:b4:54:c4:dd:
dc:7e:23:b3:d0:6c:68:47:93:d9:d3:6c:bf:99:ad:69:8d:ff:
bc:13:27:d1:51:85:b8:91:f3:11:b9:40:e0:aa:5d:54:28:cf:
a1:21:94:c0:c5:b9:7c:9f:de:2e:1e:f6:46:fa:06:59:97:24:
73:11:e4:b3:41:1a:2f:c2:5c:07:02:6a:1a:79:c3:5f:ff:6b:
a5:87:18:11:dc:42:3d:67:ab:96:3e:f4:e9:17:5b:33:1d:1e:
01:c6:27:1c:53:d5:58:25:8f:a5:db:db:3a:99:56:0d:82:2d:
6b:fb:cf:02:65:b3:44:55:c8:69:f4:74:f5:30:6c:0e:9e:8d:
70:c5:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:18:32 2025 by rpki-client