Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: l1DiXIYaEPQKVp/1aHKSqg+WTs5BarLGylR63FkOHbk=
Subject key identifier: DD:6B:01:0F:90:6B:C6:3F:AE:2B:73:74:C4:2C:A8:5A:FC:91:E1:5C
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01976D74584C0AD287B9C33759BE2A44854D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 08:00:30 +0000
Manifest this update: Sat 14 Jun 2025 08:00:30 +0000
Manifest next update: Sun 15 Jun 2025 08:00:30 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: b0Vhq4NO8n41szjqarZnfgOW8xiUxzSMyevqmrm20uY=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:58:4c:0a:d2:87:b9:c3:37:59:be:2a:44:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 14 08:00:30 2025 GMT
Not After : Jun 15 08:00:30 2025 GMT
Subject: CN=dd6b010f906bc63fae2b7374c42ca85afc91e15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:e7:26:ee:78:70:57:b2:89:7d:f6:1b:89:
7e:02:0d:f8:a8:80:71:95:90:ca:95:ac:9f:bd:f6:
8b:3e:ab:78:34:9a:2b:a8:e6:9c:16:60:5f:b6:a2:
8e:4e:33:d1:cf:9a:08:e8:d8:98:21:8d:7b:05:a9:
1d:f3:ea:33:86:3a:ad:21:b8:7b:a6:62:55:8f:81:
4e:09:ea:5e:ff:73:74:27:fd:95:12:60:a6:df:18:
0a:e9:a8:fa:99:51:50:df:0f:24:66:b1:45:19:74:
96:62:7d:9f:8d:19:12:1f:7a:0e:f5:6e:5c:2a:d7:
bb:33:9c:7d:17:a3:37:91:2e:55:b9:35:01:28:2c:
1c:c5:4d:b1:82:13:83:95:a7:fe:65:a4:7c:90:4e:
aa:de:f4:ab:db:12:6e:1b:c4:8d:e9:bd:63:05:3a:
73:16:32:26:c5:05:8e:51:aa:cc:70:44:e8:f5:73:
db:e2:d4:af:12:cf:30:62:1b:f8:bd:a2:74:8b:85:
df:bb:9d:1e:e5:dd:fb:86:57:46:be:29:d0:25:db:
7f:3e:ce:06:06:dc:30:e0:f4:e3:47:17:b7:27:d3:
7b:b8:88:b2:53:e0:30:2f:9f:49:1a:7b:59:05:c1:
54:7e:29:0f:5e:e2:39:a7:a2:52:53:15:cd:81:4c:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:01:0F:90:6B:C6:3F:AE:2B:73:74:C4:2C:A8:5A:FC:91:E1:5C
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:ad:3a:5f:6a:4c:a4:e7:c0:43:5f:69:b2:35:cb:65:c7:
24:a6:f8:32:1d:53:4a:fb:1f:74:3a:ba:8e:e1:26:45:cb:47:
f8:2d:9a:dd:1e:f6:b8:a2:d2:f4:f2:ad:c0:81:aa:e8:bd:fc:
b8:37:04:66:72:96:d1:1a:a3:d7:5c:84:91:6e:32:dc:66:34:
d9:d2:0a:ea:1f:5b:da:c4:76:40:e3:53:b4:1a:6b:dc:a8:b6:
f3:f5:f6:ec:0e:c3:e6:3b:8a:94:42:ce:b4:25:23:da:b1:d4:
74:ea:dd:fe:82:89:2b:7f:4c:7d:3d:30:4d:77:54:0c:f1:ec:
ba:75:ed:3f:9b:94:99:39:89:24:0e:03:b2:78:a3:8d:be:21:
35:d1:2e:01:a9:de:4a:7c:01:8f:19:b7:a3:8b:98:ce:04:dd:
57:d7:a4:7e:da:2a:ef:56:1c:2f:1a:2e:82:77:88:5b:84:18:
83:0f:59:ae:f9:bd:72:17:e4:1f:7b:2c:98:16:32:11:5b:a3:
23:da:49:55:09:13:6f:77:cb:17:66:7e:e7:15:4e:20:ba:e3:
fc:69:ef:e4:41:e2:01:61:5a:1b:33:81:93:90:03:0f:f3:7d:
7f:24:ae:6a:12:de:5b:15:dc:8f:4a:16:3c:bf:a5:29:59:b6:
8d:46:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:07:51 2025 by rpki-client