Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: nV+jcwCam80yNQBMXo7CR69Lu0Xo1ogKzEIfIKUIDSg=
Subject key identifier: CC:C2:D2:A0:1C:F8:2C:96:B5:F4:73:80:E2:32:C9:91:E1:A0:62:F9
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 01974CD6DED8F2FC4711D300A083B5A6115D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:00:39 +0000
Manifest this update: Sun 08 Jun 2025 00:00:39 +0000
Manifest next update: Mon 09 Jun 2025 00:00:39 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: SZ7CDLuIv0sNgYSc8Ar7t+zgklJE6772rXXb8G9O1CE=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:de:d8:f2:fc:47:11:d3:00:a0:83:b5:a6:11:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jun 8 00:00:39 2025 GMT
Not After : Jun 9 00:00:39 2025 GMT
Subject: CN=ccc2d2a01cf82c96b5f47380e232c991e1a062f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:2d:03:1a:43:e5:07:a2:74:bb:e1:21:f4:
e2:4a:f1:62:8c:d2:9b:44:b8:8e:1b:4e:ee:1e:60:
c8:79:7c:cc:6e:f2:d6:9c:7c:a9:89:47:c5:9c:ca:
ef:ca:0a:c8:7d:76:26:5e:5a:61:00:97:23:25:b4:
32:46:b7:94:78:6d:5c:27:0e:d4:24:6b:46:2a:c1:
f8:7e:ff:8a:5d:3c:7c:8d:32:a0:90:d9:49:e3:cf:
15:9e:17:af:f8:2f:65:88:c6:64:82:ce:73:73:a1:
50:2f:80:c6:ee:e1:91:28:17:b5:e3:03:ef:19:9d:
dd:e6:39:eb:78:8d:08:b9:e7:d1:c2:b5:4a:71:14:
d3:f0:03:35:c2:3a:0b:a9:c1:d2:de:cc:80:47:82:
22:ba:41:25:a2:ce:71:fe:ee:7d:25:60:f5:20:38:
22:6f:63:d6:32:72:51:21:25:c4:09:ba:ae:fb:0f:
47:b4:80:74:9b:6f:29:37:65:9a:bc:19:b0:33:96:
0d:22:ee:83:86:a4:62:78:fe:71:08:ca:9c:6b:d0:
2a:da:64:f6:ae:19:26:6d:12:b6:53:29:1d:9a:43:
82:82:db:e9:d9:93:98:ea:db:c2:52:9a:15:24:50:
2c:48:25:3a:7c:45:d1:1a:3b:24:d9:da:56:02:a4:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C2:D2:A0:1C:F8:2C:96:B5:F4:73:80:E2:32:C9:91:E1:A0:62:F9
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:1f:9f:f3:0c:a4:98:0b:e6:d4:7e:e4:dd:fe:a2:d1:5f:
67:d8:90:11:f5:72:01:37:fb:91:aa:8b:9f:d4:be:c7:88:a6:
6c:13:7a:28:5a:f7:f1:fd:28:24:a8:1f:2b:48:38:f5:02:78:
e8:e3:9f:9d:91:1f:67:3e:f2:3d:1b:36:23:dd:ea:9c:7a:44:
3b:c4:7e:92:5b:82:8f:83:3a:95:4c:94:96:31:87:94:ef:0b:
79:4c:05:18:3b:cf:dc:01:ab:9f:7c:6c:27:b0:67:e7:01:67:
03:a1:c7:7a:7f:d5:18:45:31:17:0a:f2:6c:5b:b6:7e:29:cd:
45:32:f1:c4:b3:08:b6:8d:23:39:48:db:9c:03:fb:b7:eb:fd:
16:80:b8:57:05:bb:f5:bd:02:a7:2a:b3:ca:bb:ad:bf:65:4d:
83:c2:ef:02:f5:bc:dd:f5:b7:d2:72:2b:15:29:28:5e:6c:f0:
f9:dd:e4:c0:66:36:64:d5:2a:78:14:e6:7d:ae:19:2a:b3:9f:
c8:0b:b2:8d:1b:6f:98:8d:bd:d7:32:34:0c:51:b1:66:60:1b:
ae:e4:65:14:51:69:17:81:0b:76:5a:c6:3e:01:72:59:f8:09:
7f:af:2e:d3:02:d3:50:a7:7d:71:65:05:ef:71:51:a5:d0:05:
b3:dd:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:44 2025 by rpki-client