Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: aOAmTK8a26PkpiB7N54f0awC5FpX+k3NDgVM8+3ebtQ=
Subject key identifier: 45:56:48:79:9A:D7:DD:59:79:02:EF:B9:4B:39:DC:C5:35:1B:27:48
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 0197481EA0B258CF099EA2581AEC99294DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:56 +0000
Manifest this update: Sat 07 Jun 2025 02:00:56 +0000
Manifest next update: Sun 08 Jun 2025 02:00:56 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: lgRw0dzfOkEzxC5al8luim0jrFbBS5EIBQs5lZJwKwY=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:a0:b2:58:cf:09:9e:a2:58:1a:ec:99:29:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jun 7 02:00:56 2025 GMT
Not After : Jun 8 02:00:56 2025 GMT
Subject: CN=455648799ad7dd597902efb94b39dcc5351b2748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:98:41:9d:0a:dd:cd:63:5f:f7:e8:13:ca:
ba:5d:f1:1d:f0:bd:a5:26:be:df:41:e3:b6:48:2a:
60:e4:a1:73:21:5e:5b:a2:5a:38:50:35:1b:cc:47:
89:d5:5f:b1:bb:51:c8:1b:ea:72:ad:77:37:d0:be:
af:bc:19:63:8a:72:42:ea:1a:ad:e1:ef:b3:b7:98:
99:bc:80:34:ce:1a:c4:e6:47:79:d8:c0:5a:58:ec:
5e:ce:f0:3d:88:91:a1:07:5a:92:a7:e8:14:9e:d8:
bb:9f:a1:aa:90:ef:a5:56:0a:78:56:a9:2a:7c:36:
07:b3:d7:63:1e:41:58:cb:e1:1e:61:34:33:f6:55:
71:59:00:cf:c6:92:17:3f:7b:ab:48:ef:be:a7:a5:
9a:2a:4e:3b:0c:72:04:a7:c7:d7:72:98:ec:f5:c2:
c6:6b:01:1c:ec:e4:02:9f:6c:57:39:43:b4:60:d6:
21:5b:66:e7:4d:d2:98:30:2e:21:4c:8d:a3:86:d6:
77:7c:e8:66:70:a4:b6:fb:37:82:99:56:ac:d0:09:
f6:0e:c4:30:1c:19:2e:1c:50:e1:22:1d:78:16:3e:
57:23:de:15:4d:51:f1:63:04:ae:3f:82:43:47:17:
2d:6f:61:0e:05:4e:7c:76:28:f9:6e:e6:6d:82:83:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:48:79:9A:D7:DD:59:79:02:EF:B9:4B:39:DC:C5:35:1B:27:48
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:48:b1:94:6b:6c:f5:7b:7b:c8:ac:a4:b2:db:9d:d4:f5:5c:
50:a7:c4:d4:3b:a4:e4:bc:39:84:65:e5:8d:98:49:db:10:7e:
f1:97:e5:c6:5f:c5:6d:fd:ee:e4:59:32:34:b7:c8:f9:80:97:
0c:27:6b:ee:40:eb:04:da:c7:ca:d1:38:f0:22:71:f5:98:39:
0c:3d:40:ee:12:14:f9:9e:36:f0:d1:e3:76:f2:ea:48:b2:3e:
91:18:ce:c9:c2:75:6c:04:b1:b2:ba:20:b5:f3:bf:7e:87:2c:
e7:78:e0:65:f3:02:20:8b:57:09:c3:81:ba:29:d6:38:36:9a:
47:28:bd:3b:0c:95:65:e3:d8:88:ba:4e:9b:d1:1a:81:ee:9b:
94:44:1f:8b:00:48:34:6c:b1:52:7f:bc:fd:f1:04:2f:6b:62:
f1:4d:15:8c:58:44:f2:73:03:49:69:c0:6d:a5:67:cf:19:6c:
75:33:ad:5c:23:df:eb:00:1a:9e:6c:8c:87:8e:dc:08:b8:4a:
7f:8e:54:89:97:2f:2e:7c:ad:34:e1:b4:0e:a6:42:32:ed:9c:
fb:60:6f:58:6a:bb:23:59:36:f4:63:a0:89:ae:e6:23:8a:b3:
c7:64:bb:4a:5a:36:db:85:25:4f:7e:00:c4:bd:27:53:30:aa:
7f:9a:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:45 2025 by rpki-client