Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: eVxmIUXsJOOqXZ9RA3SYiGTssHL0oc9sjq9MzaIVoiY=
Subject key identifier: B5:A7:93:A4:60:C0:25:74:4A:CF:08:46:3B:CF:4C:81:5B:DC:29:2E
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 01975D5CCAB8FBFC121CB793D0981B2DD0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1274
Signing time: Wed 11 Jun 2025 05:00:51 +0000
Manifest this update: Wed 11 Jun 2025 05:00:51 +0000
Manifest next update: Thu 12 Jun 2025 05:00:51 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: nhqUmaS9RAXW80xBpGUR9F0RhaScXU0a1VAOwhVQDiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:ca:b8:fb:fc:12:1c:b7:93:d0:98:1b:2d:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jun 11 05:00:51 2025 GMT
Not After : Jun 12 05:00:51 2025 GMT
Subject: CN=b5a793a460c025744acf08463bcf4c815bdc292e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:37:3e:c0:e8:6f:f2:cd:c0:f2:81:48:82:
b5:09:6c:21:6c:19:d4:b8:37:6d:37:50:83:df:ff:
0c:0e:a1:54:38:55:00:46:93:be:24:df:d2:36:36:
48:79:b5:6c:59:93:2b:39:8f:26:9d:8d:53:af:f3:
a1:4e:1d:0b:ec:30:98:7e:30:3e:86:25:cf:61:20:
c1:74:b3:73:e5:17:05:fc:79:fc:f0:32:68:c7:00:
1b:d6:02:de:86:70:12:10:10:2d:c6:d3:5c:23:d0:
5f:a0:c5:e9:79:5d:f5:18:2d:df:d6:97:b6:67:1f:
bf:8e:c1:55:16:bb:0b:41:bd:39:db:a3:f2:46:fa:
93:ec:36:06:25:01:1c:d7:c4:5a:7f:c6:40:a7:40:
d2:d8:62:10:69:6e:51:52:f1:b5:85:79:a2:7d:a6:
38:ff:35:69:07:60:84:0f:d2:c7:83:c0:da:ef:7e:
e8:68:da:cf:68:f8:e2:4b:a3:ee:4c:e2:45:85:d3:
a3:9f:52:33:3f:c9:4f:1a:a9:74:fa:0b:6d:0f:b1:
96:1a:d8:ec:ed:c9:cf:03:e0:b0:47:f1:f9:10:9d:
20:28:29:a7:3e:ab:5b:03:9e:c9:30:b6:d1:56:03:
89:9c:73:40:88:ab:96:5d:4f:2a:8e:fa:64:8f:ae:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:93:A4:60:C0:25:74:4A:CF:08:46:3B:CF:4C:81:5B:DC:29:2E
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:75:22:d7:be:9e:ce:cc:4a:26:27:52:2a:4b:1e:77:87:
78:21:fa:ed:af:1f:31:c8:91:b4:ac:48:eb:55:ba:4f:81:98:
a4:95:4b:ff:54:ec:6d:06:ab:67:44:ae:89:cb:8a:a4:de:90:
7a:b1:12:08:fa:3a:37:f0:be:9a:30:dc:de:5e:5c:44:c0:72:
b8:6e:4c:e8:4a:99:45:d4:51:e5:b6:4e:fc:6a:17:22:a2:f0:
b4:06:38:95:37:74:be:a8:43:13:00:b2:c2:38:be:e8:7f:0c:
3f:78:bc:4d:c8:57:ea:36:99:46:3d:75:11:1a:9e:bb:2b:51:
84:1c:64:8a:c9:e8:77:5a:c6:f6:4f:0b:39:8e:24:5c:d8:87:
f8:2b:5d:99:4e:80:77:7a:a0:42:ab:48:9f:53:cd:be:c9:ae:
0e:11:b8:87:30:50:ea:cc:cf:f7:02:46:39:58:43:bd:52:a1:
e9:f4:38:05:dd:15:13:24:49:36:aa:6c:b8:47:35:e2:93:5b:
e1:1a:9f:c1:ab:f4:8e:00:bd:05:c2:48:0e:c2:00:45:b9:2d:
3d:21:84:a7:36:66:9f:d0:56:a9:ec:e9:cd:e3:86:7b:2e:57:
42:89:9a:d0:fd:cf:7a:95:4c:df:79:50:a7:90:b9:b4:41:61:
ed:7f:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:42 2025 by rpki-client