Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: /u+Jb6Z51FzlgtE1DMqP4lsETdLX7kwjQS1Pw4l1vIg=
Subject key identifier: 8E:80:55:E9:33:99:D0:FB:2E:8E:F3:59:DC:89:44:CD:79:AE:BE:74
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 01974967B6EDE8FE33BB701C4082BA4204D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 0914
Signing time: Sat 07 Jun 2025 08:00:22 +0000
Manifest this update: Sat 07 Jun 2025 08:00:22 +0000
Manifest next update: Sun 08 Jun 2025 08:00:22 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: sA9eT+vHrksyI4c53uqaYymoD3yoeXNVejU3rW0g77M=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b6:ed:e8:fe:33:bb:70:1c:40:82:ba:42:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Jun 7 08:00:22 2025 GMT
Not After : Jun 8 08:00:22 2025 GMT
Subject: CN=8e8055e93399d0fb2e8ef359dc8944cd79aebe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:be:f1:94:1f:92:e9:f6:1a:f1:e8:8e:12:
fc:f8:c2:71:e8:24:90:03:84:2b:27:64:90:41:20:
cf:e7:3f:98:da:62:a4:23:df:db:c5:29:92:0d:87:
c8:78:66:a2:82:e3:26:fc:8c:73:04:ad:0b:b6:95:
af:25:de:1a:d2:cb:a7:5c:27:26:5d:d6:ad:7e:53:
5a:d7:0d:02:26:b4:29:d4:18:72:60:3f:4c:27:29:
29:ad:c6:f1:28:e4:29:eb:30:85:ac:f9:65:91:a8:
dc:c0:37:53:46:e2:9a:82:3e:4d:c7:77:6d:7e:7c:
05:ba:74:63:df:55:b8:c3:83:18:8b:9d:4d:cd:b7:
6f:9f:9c:f1:23:37:23:fa:50:45:d1:89:73:16:0a:
18:48:ab:e0:f3:de:fc:d2:90:4b:22:0d:72:e6:61:
1a:ca:63:bf:0e:b4:f0:90:04:a6:49:27:00:24:60:
79:5d:bb:69:86:7f:ae:ce:c7:63:7f:8e:56:92:49:
4d:e4:e3:ec:0b:cf:9c:aa:88:d1:94:7a:80:ad:7d:
69:86:1a:ff:4a:a8:b7:70:82:33:df:29:c7:28:7b:
58:c2:78:fe:c8:2d:b9:d6:99:94:15:6e:34:2b:73:
b9:34:a1:c4:88:f6:46:f8:b0:ec:af:97:04:71:a2:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:55:E9:33:99:D0:FB:2E:8E:F3:59:DC:89:44:CD:79:AE:BE:74
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b8:99:d9:2c:5f:a3:6b:a1:5c:59:fe:0a:89:03:11:49:11:
6c:5a:02:3f:d8:eb:85:72:70:72:21:96:da:9a:f4:1a:14:cb:
44:30:ff:4c:c9:b7:46:c4:88:1a:58:7e:fc:85:03:be:93:5d:
3f:ba:bf:1f:9a:58:a0:e5:78:ae:00:5d:45:45:e4:cd:9d:51:
2f:f0:69:fb:5d:0d:a5:dc:80:5e:3b:b6:fe:87:e6:b3:1b:b8:
42:2b:c2:84:ba:08:6b:3a:af:f7:a6:65:5a:77:c3:c9:c2:0a:
05:2e:60:76:ae:36:d2:b7:ed:f6:ff:c3:98:35:a8:63:60:db:
d0:36:46:9c:55:8b:cb:1c:ab:1f:fd:83:01:a3:d3:83:1c:10:
c2:a2:9c:69:fd:72:dd:b6:75:1c:3f:11:37:58:c3:cb:c8:17:
8f:eb:60:60:61:ff:e6:27:c8:b3:5c:19:ac:6b:70:4c:e6:83:
25:39:74:5a:b1:ee:19:6b:d3:e0:f2:82:aa:19:43:fc:c1:7c:
42:41:9c:18:ee:e5:5f:15:14:da:8c:09:ca:f1:6e:2d:dc:0f:
aa:c1:eb:be:40:8b:46:53:a3:78:e5:45:a4:9e:31:f7:eb:28:
75:47:ae:2c:3e:78:3a:fd:8a:48:51:f7:2b:e2:c4:ee:38:25:
cf:3c:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:55:09 2025 by rpki-client