Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: CZNNo4TJ4Y4RX8vVxCV5u2y/UZhz0fRjemWUNVzuxn8=
Subject key identifier: 22:01:3E:C0:08:01:97:D9:2C:E4:40:93:30:40:10:FC:68:DC:32:9D
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 01974AB1C3E58084DB1B829433FDF408BCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 14:00:53 +0000
Manifest this update: Sat 07 Jun 2025 14:00:53 +0000
Manifest next update: Sun 08 Jun 2025 14:00:53 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 6yIlLa6udJiMIVMIrV729wK+aCUUjKUgYQVqBxEM8+Q=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c3:e5:80:84:db:1b:82:94:33:fd:f4:08:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jun 7 14:00:53 2025 GMT
Not After : Jun 8 14:00:53 2025 GMT
Subject: CN=22013ec0080197d92ce44093304010fc68dc329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:48:88:4b:a0:ff:5c:b5:06:d0:93:8d:f9:
72:18:59:16:f3:cc:1f:75:fa:d7:bd:65:18:b1:c2:
44:51:19:4e:08:b0:99:d1:4b:33:c5:9e:42:3e:c6:
f5:06:7d:69:96:e6:8a:2d:b4:56:3d:43:c6:74:0d:
b2:74:f0:16:7f:d7:71:22:72:63:d7:a2:13:b7:39:
4c:79:36:6c:82:fd:74:dd:da:41:32:af:86:f0:d4:
6c:fd:04:63:cb:37:37:5a:eb:1e:66:a9:18:70:bc:
48:2f:a2:12:0e:0d:17:e1:9a:a3:2e:8c:37:4c:2b:
b5:6f:a8:ce:6a:61:3d:51:21:bf:73:40:e8:b2:5d:
4f:99:ea:bf:76:27:68:c4:f5:cf:6e:7b:d2:31:3e:
a8:d4:19:dd:63:fc:aa:51:6d:69:90:e5:58:8c:34:
73:fe:88:5b:4b:82:52:c3:81:ae:d4:56:57:7d:7e:
84:f7:df:3c:8d:8c:56:40:71:93:a4:d3:d3:c4:a0:
cb:7d:9e:1e:c9:2c:81:b1:8e:54:24:fe:00:ec:8f:
e7:72:8e:20:b4:3b:af:3a:b4:bd:c1:cf:8b:80:f0:
84:8e:eb:c3:2d:da:50:f6:7f:07:1a:00:94:43:66:
27:59:56:35:72:d7:3f:9a:ff:7c:13:1e:39:f2:e8:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:3E:C0:08:01:97:D9:2C:E4:40:93:30:40:10:FC:68:DC:32:9D
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b2:ce:60:26:96:7f:e5:f2:5d:98:43:a7:40:df:1d:ab:67:
74:c9:8d:68:47:f9:4d:12:b0:c7:f2:39:f0:63:aa:94:48:fc:
b1:66:7b:32:91:d1:a1:97:31:6e:df:ea:ec:c5:bc:bf:7c:c2:
29:26:e2:8f:00:74:8e:0b:55:4c:fd:52:b5:b7:02:d8:98:f4:
d7:54:55:d9:c1:07:c2:74:49:d7:cd:7f:2d:a6:b3:0b:da:b3:
25:83:52:c5:5e:da:be:e2:89:20:35:b6:be:a9:ae:4e:4a:f8:
d4:4f:65:f8:4b:f4:52:61:f4:a6:9e:97:96:d8:f8:12:6c:41:
15:36:14:1e:1f:b8:e0:78:67:d4:98:f2:97:2b:63:90:79:0b:
9b:a5:aa:57:84:94:27:b9:ff:e1:b2:7d:07:1a:d7:d2:f3:f0:
04:a6:9a:e3:d3:64:fb:f8:aa:ce:da:89:6c:e4:bc:3f:45:90:
1e:80:5c:c7:82:a5:54:01:7e:8d:eb:99:e7:5a:c0:89:e0:64:
8a:48:ff:8e:31:e9:34:40:71:2e:43:2d:58:21:e3:b2:d9:f7:
cd:15:5d:a0:c8:c8:b5:11:c3:53:10:6e:13:60:25:b4:69:77:
88:61:f8:82:4b:45:11:be:ef:18:fd:7a:59:48:0c:ba:2a:90:
bd:0f:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:16:25 2025 by rpki-client