Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: c+BbSBEyudAHXfDCb0qT6OK4pE72peET4JlF29ZcXgs=
Subject key identifier: F4:C8:51:52:82:09:19:B1:2D:E0:7A:E7:5F:F1:F9:06:DC:63:C7:48
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 0197481EA20A1B0F7DC8D698E7DB0768B282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 02:00:56 +0000
Manifest this update: Sat 07 Jun 2025 02:00:56 +0000
Manifest next update: Sun 08 Jun 2025 02:00:56 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: oS5CQ4tGYt0E7ZtQKagOnkO82VTj+qj2WjAKq7W6jr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:a2:0a:1b:0f:7d:c8:d6:98:e7:db:07:68:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jun 7 02:00:56 2025 GMT
Not After : Jun 8 02:00:56 2025 GMT
Subject: CN=f4c85152820919b12de07ae75ff1f906dc63c748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:ac:27:a2:00:ef:41:b7:b1:0b:2c:ab:e6:
5f:d5:f2:60:72:d4:2f:c5:82:d7:a9:03:21:d8:3e:
f1:d5:7d:c7:dc:c3:b8:19:e6:45:b4:ca:ce:9c:a2:
cd:9f:af:8f:fa:d0:4f:de:ff:88:e8:19:57:2f:22:
01:fc:ef:2f:28:45:2d:c6:d2:f0:7e:ba:0f:66:2d:
09:72:94:eb:2e:2a:f7:1a:d2:3a:49:ee:c1:d8:32:
17:4d:ad:8c:fa:7f:19:e7:73:f4:73:37:01:6f:6e:
6f:e5:c5:55:0f:ac:a5:cc:42:ce:1d:1f:b9:4c:bf:
f1:87:db:24:74:fb:64:c6:ee:36:d5:5b:9c:a3:9b:
ef:d1:4f:fa:b2:8f:1b:50:7f:11:64:b3:81:15:e3:
60:b1:b3:4e:c7:20:94:b7:88:6e:6f:d2:2e:cd:0b:
17:3e:ad:23:4b:f7:38:09:0b:4b:d7:75:60:37:a3:
6d:6f:eb:4a:c2:36:1d:ac:3a:21:38:c0:65:1c:47:
64:73:c7:34:16:45:03:78:24:a6:c4:c2:56:8f:da:
e2:97:e8:aa:87:1f:e1:0b:65:84:95:f8:b1:57:45:
c8:fc:29:41:82:4a:57:d9:3d:04:c2:a8:a8:72:43:
59:11:8b:b1:55:10:e1:1b:1e:96:b5:24:cf:0a:e9:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:51:52:82:09:19:B1:2D:E0:7A:E7:5F:F1:F9:06:DC:63:C7:48
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:e2:92:eb:24:4e:4b:cd:71:86:b2:6b:6b:74:02:87:af:
74:66:66:d6:2e:f3:60:89:c4:ec:dd:78:31:50:b7:72:92:a6:
12:c8:70:0d:e4:15:93:c0:e1:d1:91:f4:40:da:42:3e:68:1f:
6c:a8:7c:46:4e:bd:e0:cf:3a:8b:07:fd:6a:b9:99:21:34:ab:
dd:9c:20:a5:1f:54:51:4b:4e:3a:a9:e2:dd:67:c4:d1:15:ca:
a0:e4:cf:e9:9a:91:e9:0e:3b:d3:57:88:01:ab:cd:e5:38:0d:
a5:35:27:41:7d:03:d0:f7:64:4e:fd:2f:f3:dd:21:9a:3a:da:
d5:6e:be:41:03:45:5f:ea:58:b1:7a:53:fd:02:ee:cd:cf:85:
6c:4c:e3:7d:97:32:87:8e:b8:ff:9a:b6:db:2e:d9:5c:86:8d:
94:9c:9f:74:55:fa:f3:4e:5d:84:66:0c:c2:ec:c8:d9:f6:ef:
02:7d:36:f9:c9:1e:74:54:a0:92:15:ad:44:aa:68:3a:89:87:
10:62:f3:f8:6a:35:ad:b0:bd:75:bb:9e:a7:b8:6d:9f:ea:c8:
04:68:e7:b9:44:3e:4f:00:2a:9f:f3:58:de:0d:6e:ff:3b:74:
f4:9e:30:46:39:08:64:02:9b:82:7b:33:8e:55:e2:59:ce:04:
58:c4:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:02 2025 by rpki-client