Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: SVipXtT2ah5LYn/Ol4XrTY9H1ubuz5Amr70K92Gxoe8=
Subject key identifier: 3F:E6:D7:E9:26:7A:9D:55:7C:E8:4A:46:AD:00:A2:D8:59:08:4E:5A
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019750467C5C14CC60E6A05BC0E4627B7216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 16:01:25 +0000
Manifest this update: Sun 08 Jun 2025 16:01:25 +0000
Manifest next update: Mon 09 Jun 2025 16:01:25 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: ggDHyTXi2suYDddABQKCHiE5SWSoENDGa0Jw+w7OchI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:7c:5c:14:cc:60:e6:a0:5b:c0:e4:62:7b:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Jun 8 16:01:25 2025 GMT
Not After : Jun 9 16:01:25 2025 GMT
Subject: CN=3fe6d7e9267a9d557ce84a46ad00a2d859084e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:08:67:5d:cf:03:f1:82:8d:f0:11:eb:2c:
aa:8c:81:fd:a4:a7:62:1f:c7:a3:31:83:cb:d1:e4:
f0:7a:0b:4c:8e:60:97:4d:8e:25:a5:b3:d7:ca:31:
f3:40:c8:28:3d:cb:da:31:20:ec:a4:10:9c:40:14:
a8:4e:cb:e1:87:59:96:f5:29:b3:4d:ba:ab:3e:b8:
31:60:2e:a5:5e:ef:e5:f2:c2:73:2e:45:45:82:83:
7f:44:51:26:9b:ac:29:0c:6d:31:fd:20:66:6f:6a:
e4:07:5b:fa:f6:9e:56:87:b0:04:84:ec:d3:3f:d7:
e8:23:67:9a:3e:61:18:ea:3b:7d:65:ce:11:8d:dd:
6b:a8:a1:04:57:39:a2:4c:92:cc:fa:c5:8c:a4:23:
cc:c1:a0:44:39:75:d6:f0:08:31:f2:05:fb:09:4f:
6d:1a:21:ff:15:0b:2d:33:02:9d:d7:d2:87:66:d9:
a7:95:00:fc:09:d4:fb:92:f0:42:ee:a0:79:8d:d3:
e3:8e:7b:a3:7d:2d:ff:38:9d:7d:56:c4:b4:92:75:
c4:0d:6c:98:8c:2c:2b:ee:f4:4e:0e:6b:e6:c7:46:
1a:a5:b2:43:fd:b2:f1:a2:01:1e:9d:89:0e:1a:28:
dc:46:61:77:cc:0f:b5:10:55:0e:b1:b7:ad:20:05:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:D7:E9:26:7A:9D:55:7C:E8:4A:46:AD:00:A2:D8:59:08:4E:5A
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:3c:e4:25:99:47:13:3e:7d:1c:06:00:c7:ac:8f:a4:c1:
b4:b9:b5:59:a1:42:1d:7d:17:78:21:72:d4:b3:6e:db:67:f6:
f5:c3:1d:6e:85:be:81:e6:e3:bf:24:54:87:5e:d0:01:b4:96:
d6:51:16:1a:0d:6d:dc:be:ad:b6:17:69:b2:61:e3:42:62:f5:
d0:75:e5:4d:2f:c2:f9:4f:f0:e8:31:44:bd:84:8e:bc:72:ce:
09:41:d1:c1:d5:14:b3:64:5f:07:f0:a6:db:8b:16:51:92:9a:
4c:46:00:fe:5f:ef:93:84:87:64:e2:c3:f5:e8:bb:40:08:f5:
b4:11:d9:e6:59:c2:8d:70:ed:e5:19:de:fc:df:7a:3f:01:1b:
44:9a:63:02:e4:4b:3a:ba:eb:53:cd:e4:f0:ba:22:86:de:d8:
1f:c1:1d:10:13:8f:0d:ac:39:b2:6d:0c:53:af:c3:9a:26:a8:
38:8e:c2:72:7e:38:15:5d:00:bb:5c:92:58:16:5e:f9:58:ec:
c1:94:b4:86:fd:7b:c7:6d:31:b2:cb:ee:1e:42:42:de:8f:30:
a9:39:ce:0d:4f:20:d6:99:30:be:9f:a9:d2:60:d2:3c:82:c3:
05:ba:a2:00:43:9e:09:0e:50:cb:88:f9:32:a5:9e:b9:77:62:
fd:54:36:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:56 2025 by rpki-client