Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: BslP8jcnIWWDRxy/oeoBRrCG0ZB2rL4MV4HKN9BSaPw=
Subject key identifier: 77:D3:56:BD:EB:34:84:77:70:7E:B0:4C:FA:AF:30:B5:D0:C8:DF:D1
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 0197741B4D2267FF1A5C0CCE1260627C72DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 089C
Signing time: Sun 15 Jun 2025 15:00:35 +0000
Manifest this update: Sun 15 Jun 2025 15:00:35 +0000
Manifest next update: Mon 16 Jun 2025 15:00:35 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: 7N9xKQLZYGHid7dvwNQyda1uENoRR+08RpbRi6HU7fE=)
2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:4d:22:67:ff:1a:5c:0c:ce:12:60:62:7c:72:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Jun 15 15:00:35 2025 GMT
Not After : Jun 16 15:00:35 2025 GMT
Subject: CN=77d356bdeb348477707eb04cfaaf30b5d0c8dfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:fb:9d:c7:79:22:32:99:73:ab:57:e1:64:
0e:a7:4a:97:ad:a1:04:36:76:bf:73:92:3d:ae:98:
44:61:5f:1a:3e:ae:82:af:e7:a8:ee:43:c3:ee:26:
bb:42:25:74:6d:ef:ea:7c:89:89:95:f1:30:ac:d8:
9c:48:95:bf:97:b6:18:1b:03:30:cf:e8:c3:1e:10:
80:88:ba:3f:2a:1e:5f:43:91:46:67:11:e1:73:38:
2a:87:15:56:bc:dc:e8:14:f9:42:df:9e:12:5a:4b:
0a:15:f6:bb:19:7f:82:9a:68:6d:aa:ee:07:09:8f:
2d:62:87:a8:ab:b4:d7:31:af:d8:2d:e0:83:a4:aa:
29:59:03:53:bc:b4:7d:f7:88:0c:d2:40:21:23:49:
66:0d:07:38:6f:54:62:0a:6b:09:0e:df:88:80:f6:
72:b4:33:d7:d6:ea:74:d9:cb:18:ed:05:80:dc:aa:
2b:8c:7d:7a:8c:23:ec:3a:e5:4c:86:fe:34:be:3c:
77:90:fb:6f:b2:37:f2:69:5d:cd:f3:bc:da:8f:7f:
23:38:88:19:9e:c7:bf:30:0f:bd:53:6a:12:e3:c8:
7c:8b:fc:8a:51:24:c4:f2:20:3f:c2:ec:84:b3:ca:
50:5f:e7:ee:91:e4:2a:a8:72:64:ed:e9:76:b4:c1:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:56:BD:EB:34:84:77:70:7E:B0:4C:FA:AF:30:B5:D0:C8:DF:D1
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f3:05:b1:73:33:09:40:5c:0f:b9:1e:74:85:00:20:ae:77:
b4:fd:9d:ea:3c:10:a6:ee:4b:0b:37:eb:62:3d:a3:3b:cf:b1:
5c:90:ad:3a:2a:18:4b:40:35:84:12:cf:06:63:d2:56:ea:65:
86:fc:8f:da:3f:d1:09:51:c8:82:8a:25:3d:7c:70:39:96:85:
b7:61:5f:4a:30:b1:12:ef:20:75:0c:1d:2a:59:d4:a0:59:53:
75:3b:fd:a8:82:b9:c6:5f:d9:63:85:46:00:4c:87:54:36:44:
a6:9d:7d:9c:6d:dc:0b:53:a1:3b:b2:e6:1f:d7:4d:c0:92:33:
25:d0:9e:79:96:2a:5c:ea:b6:20:f7:a0:96:d0:cb:78:45:d2:
c4:08:13:31:79:9c:7b:e5:33:f4:17:85:21:67:7e:a5:b5:af:
40:72:b0:f2:6b:34:82:96:7d:76:4f:8b:19:93:c3:72:04:c6:
f0:2f:cb:66:6a:c4:e4:04:94:07:5e:27:7d:7c:d3:40:cb:c6:
4d:a9:19:c6:f3:3f:bd:96:40:3a:75:ae:99:1b:f3:fd:95:24:
52:3e:72:3b:14:c2:2c:56:4b:88:7b:f1:fa:85:8e:40:12:19:
cd:d5:b5:86:c0:b4:d2:8e:21:10:a5:c0:8e:4c:d0:e1:d6:27:
55:74:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:40 2025 by rpki-client