Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: L/UdYeJDOmMeKtwt8bC4ki7nzv0mAiK1D7OwKV+M+lI=
Subject key identifier: 1C:E0:34:4D:6E:DA:5A:7A:BF:0A:CE:D2:8C:62:09:02:84:74:10:55
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019761DE2A07365021964C39319035721362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 02:00:39 +0000
Manifest this update: Thu 12 Jun 2025 02:00:39 +0000
Manifest next update: Fri 13 Jun 2025 02:00:39 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: 7FjMZUwx98iKfMRy9Ku4MK5gWOwh2W6x5xIM0zihP/k=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:de:2a:07:36:50:21:96:4c:39:31:90:35:72:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 12 02:00:39 2025 GMT
Not After : Jun 13 02:00:39 2025 GMT
Subject: CN=1ce0344d6eda5a7abf0aced28c62090284741055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:bd:b9:29:a1:63:05:e0:6f:00:83:38:70:
7e:30:f4:23:fe:43:20:70:56:f9:4a:aa:51:15:1b:
d0:b7:31:b1:56:42:01:50:d7:34:d0:66:2f:53:e3:
dc:3d:a6:86:9a:38:63:f5:ad:a9:68:b8:cf:0d:1c:
c4:ee:80:1f:f3:d9:6f:bd:16:d9:6d:a5:cc:4a:15:
9e:df:da:78:d4:a0:14:4b:3a:81:86:2f:af:f7:cf:
1f:00:cc:35:b7:06:6d:f0:ac:ca:a0:df:7a:03:80:
a1:37:28:d8:15:65:05:e2:b9:06:b5:9d:15:91:b9:
f0:ad:9e:b6:7b:c9:66:83:ff:66:22:d8:bc:c3:f6:
4e:dc:bb:1c:82:3e:08:33:ec:b7:d4:b5:8f:c2:e4:
d9:2f:90:cd:48:9c:f3:10:fc:43:35:45:4d:e9:87:
42:7e:bd:c8:b8:fc:7a:dd:fa:51:3a:65:33:b9:0f:
50:d8:86:d1:4b:bf:77:34:d4:e5:19:c7:c6:12:ad:
e9:cd:e6:92:85:a4:e5:53:ea:07:3b:42:f5:8b:a7:
6b:fd:a9:5c:1b:bb:fd:65:f7:92:26:23:36:84:e3:
a8:2a:d7:ba:a1:2e:a0:4e:f6:12:20:c8:4f:9b:86:
61:c8:3c:57:94:af:4d:30:e0:0e:e5:cc:5c:ad:98:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:34:4D:6E:DA:5A:7A:BF:0A:CE:D2:8C:62:09:02:84:74:10:55
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:06:36:df:ed:29:5a:ee:cf:46:a0:29:65:86:96:22:73:dd:
c6:2b:c5:63:5d:e9:8b:0f:aa:c1:7b:6c:4f:90:20:f6:d7:33:
a1:b2:54:06:57:aa:e2:f2:9f:a1:f5:b9:e0:0e:13:e2:90:63:
50:f0:ce:f3:f0:9e:87:01:a2:6f:74:97:1b:69:49:17:51:d6:
63:69:11:65:7a:f6:ec:7a:39:a3:36:55:21:6b:31:5c:c9:71:
de:00:ac:4e:67:47:64:aa:d0:62:c4:c1:a2:ed:9b:4f:bc:3b:
1f:6f:31:02:cb:bf:b6:4f:b2:41:3a:20:89:83:ca:f7:5b:0f:
8b:3f:ff:de:3f:fb:b4:2d:75:62:0b:6f:7a:b9:2b:a5:a8:37:
71:16:fb:83:1b:4d:16:fe:20:e4:9f:af:90:e0:46:89:23:73:
d5:c1:17:4d:d1:29:c5:7f:1c:b4:78:b3:83:7d:fd:aa:3c:da:
07:49:bf:2b:72:78:47:71:b6:ff:57:aa:58:2a:4d:65:72:e7:
bd:8e:88:5b:8d:19:f8:d6:e1:13:a6:94:06:ff:d1:fc:3e:d2:
f2:d8:31:49:2e:01:49:bb:f7:31:be:d3:64:ca:e3:c7:8f:82:
65:d5:7e:43:36:7d:29:f3:f9:28:b2:1c:dd:1c:94:e8:61:1a:
fd:1e:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:50:30 2025 by rpki-client