Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: 96MwwZNoSGLsuID1xMUJKzqgxIZUtub4Ky1l5h8Uw5U=
Subject key identifier: E2:AC:9F:9A:11:A5:A1:C5:62:0F:92:61:7E:9A:33:E2:B8:F9:01:B3
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 01974E5872DD08DC0A23BDDA66BD0EFB70A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:01:48 +0000
Manifest this update: Sun 08 Jun 2025 07:01:48 +0000
Manifest next update: Mon 09 Jun 2025 07:01:48 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: FS6W01xfsH3cJkjAG2b0U2afZz6la5R4skB4Ekb8TZk=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:72:dd:08:dc:0a:23:bd:da:66:bd:0e:fb:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jun 8 07:01:48 2025 GMT
Not After : Jun 9 07:01:48 2025 GMT
Subject: CN=e2ac9f9a11a5a1c5620f92617e9a33e2b8f901b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:9c:ee:83:e4:fd:b6:11:53:4d:4e:22:0a:
57:fe:43:ab:e2:ae:98:6d:71:c9:ba:d3:71:a4:29:
b5:9a:a5:3f:4c:9d:c7:e3:08:48:9e:1b:5f:de:d1:
98:05:90:67:03:8c:07:1e:54:c0:da:1b:d1:84:4a:
71:e8:c1:7e:bf:64:ac:fb:70:7b:02:e5:00:53:34:
4d:bd:d2:4f:04:90:3d:35:2a:f0:06:ad:e9:75:28:
0f:da:21:4b:99:20:aa:23:04:b6:a4:3c:fd:f1:bb:
55:e8:b6:a9:37:55:69:6c:fe:a8:e2:5c:73:f6:26:
e7:50:8f:69:0d:45:a3:82:0b:1c:ce:25:b5:00:86:
6e:8c:28:eb:1b:6c:69:cc:4c:87:35:c0:44:3e:45:
77:a3:08:7a:49:61:62:59:85:3e:7b:b8:23:aa:ac:
24:c2:00:6f:30:e8:02:04:ab:87:ea:c2:c5:0d:3f:
87:fb:c7:0e:80:9a:fc:81:9e:29:21:96:37:01:d7:
a6:55:2a:ef:c7:c7:0e:31:2a:4a:7d:bc:96:09:55:
27:9a:3e:e0:53:2e:b6:12:f1:17:b2:fc:c5:6e:05:
75:e7:e5:35:c8:17:82:2f:6e:f9:4c:30:9e:b5:cf:
c8:38:ed:6c:ba:f1:ba:75:7c:8c:1b:51:cd:cb:74:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:9F:9A:11:A5:A1:C5:62:0F:92:61:7E:9A:33:E2:B8:F9:01:B3
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:79:ce:c0:8c:13:5c:c9:ff:00:63:3e:e3:8a:06:36:4b:
aa:ac:fa:66:41:0e:74:1c:2a:fb:d4:66:df:50:59:fe:37:3f:
da:71:f9:7a:2e:10:38:67:16:6c:b4:23:33:44:9d:88:89:cb:
77:97:1f:ff:26:3b:8b:2a:31:4a:04:ed:fa:2b:2c:ae:b7:03:
d7:d2:17:46:cb:ce:81:84:df:7f:03:33:b1:0a:d3:19:dd:3b:
ee:6f:57:43:46:3e:a2:84:2c:44:cd:13:80:f5:ba:a3:4c:61:
74:d5:41:4f:e6:83:6a:f1:92:b7:de:f9:ae:01:ef:31:e9:b4:
fc:de:e8:2f:a1:eb:79:25:93:6c:24:75:12:8d:63:7a:bb:76:
34:8e:9b:42:bc:bd:58:aa:ac:3f:0e:bc:98:ef:44:42:eb:19:
be:6a:72:f9:e3:ae:27:8b:90:aa:b9:e5:99:c4:71:3a:73:a0:
ee:71:16:8e:f0:49:7e:2c:06:f4:32:e7:b7:52:eb:51:6b:8b:
ba:7e:c2:5b:60:9b:51:7d:c1:fa:c0:75:44:5d:6f:e5:77:6b:
b0:88:ed:81:16:7f:f8:a1:2b:89:21:6f:cf:fc:35:7c:9e:85:
22:88:64:11:93:82:d7:c1:cf:d4:44:a4:dd:0e:e2:95:8f:27:
90:07:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:32:22 2025 by rpki-client