Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File: x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier: 91FlyAOAjAMGfMjOyC7Vvbj06FLLB3tnr4oSP2y5fAs=
Subject key identifier: 25:E1:F3:01:19:FC:D8:55:00:84:50:6E:E3:9B:96:1D:01:51:61:7F
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: 01975EA659795C0CBC67FDB206F16BEF8529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number: 0BAF
Signing time: Wed 11 Jun 2025 11:00:49 +0000
Manifest this update: Wed 11 Jun 2025 11:00:49 +0000
Manifest next update: Thu 12 Jun 2025 11:00:49 +0000
Files and hashes: 1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: q0117ZGYWEz4cWIWBK5yv/HfnpEU9QkRIPyK9FDGuAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:59:79:5c:0c:bc:67:fd:b2:06:f1:6b:ef:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: Jun 11 11:00:49 2025 GMT
Not After : Jun 12 11:00:49 2025 GMT
Subject: CN=25e1f30119fcd8550084506ee39b961d0151617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:5a:06:b9:ec:1c:3c:a2:7e:13:25:17:e5:
b5:6a:21:74:f1:eb:40:1c:5d:29:87:b4:56:92:f3:
60:00:68:05:7b:19:85:65:26:5d:6f:14:68:3a:fd:
de:dc:87:93:85:7a:41:c2:19:0d:67:01:4d:49:49:
f5:99:fb:85:16:79:7a:aa:12:c5:a6:c7:ae:8f:d9:
4b:5d:22:d2:ff:0c:7a:9c:91:28:1c:f9:7d:76:88:
ac:9a:1e:7d:0b:30:60:38:3c:ee:7a:e7:68:07:88:
c6:1c:84:5f:b4:91:47:dd:26:8f:4b:61:10:de:4b:
c4:b1:26:d7:0c:11:ee:5a:c0:a8:49:9c:06:ac:07:
52:01:af:cd:92:60:90:d4:d0:ee:31:15:9d:2c:af:
66:88:9f:bb:0e:3e:6a:ea:0b:7e:36:1d:7e:3e:ac:
bf:89:38:57:73:49:70:f8:4a:b1:99:21:58:d6:8e:
4c:17:d2:6b:67:dc:a6:f2:e7:53:c0:22:cc:e3:01:
7c:16:aa:23:70:eb:6b:d3:9e:06:99:a2:fc:5b:08:
0e:6e:e1:c7:3e:e1:30:90:45:b1:e1:82:3f:1a:85:
3f:3f:6a:4b:c5:c5:6a:9e:a6:59:90:45:2e:bf:24:
7c:7e:84:1e:df:a4:da:b3:f7:5b:53:a9:61:1d:a5:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E1:F3:01:19:FC:D8:55:00:84:50:6E:E3:9B:96:1D:01:51:61:7F
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f8:fe:2e:ba:99:11:d4:87:3b:73:aa:7a:7e:f6:74:ca:e7:
50:16:9e:de:39:7d:38:e3:fa:ee:c4:c7:28:5d:bc:24:9f:5f:
4b:20:14:e4:98:ab:74:b5:62:24:cc:5d:a4:c8:ec:5e:82:f7:
5b:9a:e6:bc:98:6b:13:cc:0e:20:97:6f:08:0c:9f:f1:7e:24:
93:82:b4:b1:1e:8b:da:0d:b1:1c:f8:1d:47:e8:d6:e7:71:1b:
41:dc:3b:41:14:bb:6c:d2:72:40:39:0b:d5:1b:de:56:1e:a5:
39:1f:e8:1f:37:76:73:d0:c1:11:66:ce:3d:9d:d0:30:97:e8:
4b:d4:87:1e:7e:fd:0b:e3:48:82:04:c0:33:f9:8e:ac:f5:0d:
c4:d6:0c:74:a7:77:6a:7a:0e:20:e1:f5:15:4b:8d:4d:b0:77:
ae:73:e9:d0:d8:a6:f3:95:54:d9:ed:9d:67:59:22:ed:7f:64:
17:ad:3b:dc:2b:8e:81:e0:62:27:29:d9:28:a3:3d:c7:44:1b:
33:dc:d5:38:40:c0:09:c0:c3:3f:cc:b9:b6:79:9d:a0:7d:05:
2e:81:bf:3a:be:66:5f:9d:f4:e5:9a:20:91:66:e6:83:31:24:
c6:a6:40:bc:0a:cb:84:ae:aa:de:d7:47:64:86:cf:9d:26:6f:
b3:06:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:53:09 2025 by rpki-client