
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: MlD1JiH9KleXYCZfagl9Z6wtweGgmOF9npMLeap0DmA=
Subject key identifier: CD:BB:C0:52:7B:A9:6E:E2:A5:30:F4:B7:C7:D8:7E:B2:D4:90:87:1F
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 019739BE35561100AB2D34183EDD38E81241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 08D1
Signing time: Wed 04 Jun 2025 07:00:55 +0000
Manifest this update: Wed 04 Jun 2025 07:00:55 +0000
Manifest next update: Thu 05 Jun 2025 07:00:55 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: vq8sjppuCvh+p8WI1yi4sqEI7PFn8e171LzEEINnEQo=)
2: EZYeVV1sSE-2JpbNlwV7wPbYnOo.roa (hash: ikr2sxni9DwwzkUepDYlmJ4xAXRqZ6YMknDRjY0uwRw=)
3: zFb9es3uXkPMd-ugsb3acKq2kWs.roa (hash: CpgoliFvyxru2zXx6gfrBhmQolzdlTSAa5FPVi8Uo/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:be:35:56:11:00:ab:2d:34:18:3e:dd:38:e8:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Jun 4 07:00:55 2025 GMT
Not After : Jun 5 07:00:55 2025 GMT
Subject: CN=cdbbc0527ba96ee2a530f4b7c7d87eb2d490871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:5a:d2:03:7d:54:9c:e0:70:e5:37:ca:b6:
48:da:1b:b9:90:b2:4e:4a:91:24:84:b6:77:a9:08:
35:19:b4:65:08:58:78:a3:c0:ef:a8:33:95:06:a9:
de:a5:38:fb:c8:16:68:2f:93:d0:32:ea:b5:a5:3d:
ba:d1:b9:2f:b6:6e:56:31:4a:fd:1f:87:09:12:52:
aa:37:17:79:10:e9:49:60:c7:63:23:92:c5:68:38:
2e:97:a7:dc:09:7a:d9:da:d7:13:05:86:dc:26:2b:
4b:78:ac:c4:38:ac:ff:ad:2b:12:30:b5:1e:d8:ca:
5d:e4:a4:70:e2:f9:48:08:6a:31:94:64:e8:17:80:
55:64:b7:2c:8f:79:e1:27:f2:d4:c0:a3:f3:61:e7:
a0:9d:b3:bd:6a:92:85:62:c6:f1:0e:64:d2:2a:28:
18:03:6f:39:fd:86:b8:5c:50:26:58:ad:c8:77:ad:
d4:a4:44:0c:72:20:b5:e0:a0:74:dc:e2:ba:d3:c3:
e7:4c:20:e8:9e:30:c8:47:80:9b:d3:0d:d1:b9:79:
b2:bd:71:01:08:4d:cc:03:13:61:bf:43:41:c8:60:
18:b7:05:d3:e5:14:19:80:64:d7:5d:b6:db:a4:39:
ac:ba:ed:78:8f:12:f6:e1:2a:06:a0:09:51:32:19:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:C0:52:7B:A9:6E:E2:A5:30:F4:B7:C7:D8:7E:B2:D4:90:87:1F
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:06:77:6d:71:6b:07:51:e9:1c:4b:5a:5d:c3:1a:0f:2a:78:
49:4e:0e:5b:97:2c:99:09:96:16:6e:c8:f2:0b:3d:a7:b5:ad:
d3:6e:fe:f1:fe:b0:2f:9c:3f:47:79:dc:2d:73:3a:88:e1:6a:
bb:2d:07:4d:b1:6f:4e:a8:04:31:6d:e2:f4:20:df:9a:cb:cd:
f6:73:09:8d:88:5b:ef:ea:31:f8:d1:48:8f:ec:56:c4:54:c4:
86:70:7d:39:48:6b:56:f5:6d:47:1c:9a:5d:ba:66:59:c4:0b:
47:d4:01:fe:47:dd:6f:7a:d6:96:d9:4b:d2:d3:cd:6b:5c:62:
3c:bc:df:92:9e:3f:75:a2:53:c9:f6:ec:af:01:5a:39:b2:2a:
65:0a:0c:89:eb:61:e4:dd:f9:46:d4:2a:4b:0b:ab:c2:4f:01:
e6:f7:86:77:f0:17:b7:7d:c9:fd:d7:eb:db:0c:26:12:c4:4b:
dc:b1:8a:17:b6:f4:16:af:d1:a9:e7:97:52:f8:17:24:27:08:
54:51:76:8c:29:c2:8d:f2:26:33:80:ea:7b:03:17:05:05:33:
7f:2a:44:96:46:da:bf:a2:29:58:69:df:78:87:51:e5:3d:8b:
b9:69:d6:d3:40:97:7b:19:a0:7b:6e:c7:05:40:41:17:bc:77:
6c:b3:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:26:05 2025 by rpki-client