Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: /puaW78einRoZEn6wbWJ5XOlgqPZsLCpXnEawqULY9U=
Subject key identifier: DA:EB:27:09:DA:64:0E:1E:10:71:98:20:D8:F1:B4:DB:DC:A6:A3:01
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019765BAF79AD602116EEFCB7BE6272D3CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 20:00:41 +0000
Manifest this update: Thu 12 Jun 2025 20:00:41 +0000
Manifest next update: Fri 13 Jun 2025 20:00:41 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: FOz/OToVFYnlMcU6O5xHm+iCMLpSvD0wuPW1w2c5kUg=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:f7:9a:d6:02:11:6e:ef:cb:7b:e6:27:2d:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 12 20:00:41 2025 GMT
Not After : Jun 13 20:00:41 2025 GMT
Subject: CN=daeb2709da640e1e10719820d8f1b4dbdca6a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:6c:02:68:9c:0c:07:41:99:6f:93:3a:4f:
dc:cf:05:a4:b6:31:c1:05:d9:f3:68:16:25:66:9c:
e8:65:b1:f9:30:69:10:1a:8a:03:e8:ee:4e:fc:25:
68:2a:b1:7f:e7:db:31:57:fd:6a:28:a4:bc:b5:a3:
e1:f6:73:f0:fe:73:39:ea:d7:1f:81:8f:b4:43:7c:
57:6e:bf:7d:a8:fa:22:aa:b3:6b:27:79:7e:06:2a:
f2:76:42:8b:c9:a9:a7:09:27:57:f3:eb:6e:a8:19:
41:db:34:23:7a:50:16:d7:71:da:b7:c9:91:f4:b8:
37:c5:b4:00:bf:c9:fe:6b:76:77:0f:34:e7:60:3e:
3b:df:d4:b5:50:1f:52:08:12:e3:8a:af:c5:e4:a4:
c4:ed:4e:79:8b:0d:ee:f8:0c:64:15:f4:03:7f:2e:
a0:cb:87:b8:7f:90:7c:e1:2a:00:a7:f3:65:23:ea:
e7:eb:1d:8f:df:b2:3c:08:a7:66:b0:37:5a:1d:45:
bd:ec:59:f0:1c:47:fa:2c:d1:13:3b:0b:da:6c:22:
93:d0:2f:56:a1:ff:43:02:42:3a:cf:e4:5a:68:09:
2c:e5:ae:2c:b5:92:f0:3a:a3:7d:92:d2:7f:0f:7a:
c2:da:27:af:5f:d9:cb:85:63:ba:ce:2c:6f:17:fb:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:27:09:DA:64:0E:1E:10:71:98:20:D8:F1:B4:DB:DC:A6:A3:01
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:a0:31:61:d3:95:d4:d5:8c:9f:62:61:74:cf:6c:40:df:
86:96:59:b7:d8:32:e2:90:94:f7:1e:7a:6c:71:a9:72:c0:eb:
de:f2:38:4e:8d:22:cf:ab:ff:5a:83:d6:fc:bd:14:29:0e:ad:
a8:5b:c8:48:e1:ef:76:3c:8e:d7:d9:2e:84:c8:45:6f:7e:6f:
72:52:e5:b6:b2:d8:ba:bd:dc:25:46:9b:71:62:26:5f:fd:0f:
87:78:e8:71:66:d0:6c:a9:3b:84:ac:c4:a3:0d:88:e8:98:8b:
84:c2:0a:36:23:a6:74:5b:25:e2:20:c9:00:13:5d:78:e8:83:
5c:47:1a:a9:72:21:2e:67:b8:66:b7:e4:dc:31:84:0d:65:26:
d6:19:fa:a2:c5:d7:51:d3:c9:b6:b2:34:34:42:40:23:f5:db:
09:e1:30:67:13:00:b2:fe:25:35:40:05:94:15:25:c1:37:22:
ab:8a:6a:59:69:59:e6:50:8d:50:67:85:5a:be:0d:c1:05:8c:
b9:1f:80:a1:75:fd:f5:ec:b7:19:df:ec:71:50:36:c4:9c:fd:
12:fd:d0:b7:ac:bd:94:97:67:d6:3c:85:06:32:8a:04:a7:a9:
cd:85:c9:f5:80:b6:64:51:30:81:a3:a1:09:ad:bc:63:b9:50:
7d:4a:dd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:24:28 2025 by rpki-client