Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: wHOJpiznnbXHUz/v+yWyhh2CuipRFl2hwi8iiDI51Eg=
Subject key identifier: D8:4B:C7:04:0C:45:81:CF:15:24:B8:52:42:CB:B7:58:3B:70:67:50
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01975FEFCA04FA21097825A179B6D97DC022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 17:00:39 +0000
Manifest this update: Wed 11 Jun 2025 17:00:39 +0000
Manifest next update: Thu 12 Jun 2025 17:00:39 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: yCcQppveqUuPDcZ65bv9jETL+Rki0oOYAsf4BjTkM0o=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:ca:04:fa:21:09:78:25:a1:79:b6:d9:7d:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 11 17:00:39 2025 GMT
Not After : Jun 12 17:00:39 2025 GMT
Subject: CN=d84bc7040c4581cf1524b85242cbb7583b706750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:2f:e5:98:8e:32:1e:f1:93:cc:f9:27:af:
f3:87:d7:36:f3:17:75:24:82:83:19:94:56:19:ce:
e7:be:9d:0b:dc:41:21:ce:9c:82:34:18:69:71:2c:
7b:af:ad:84:3b:59:42:96:64:80:d0:c3:2d:e5:20:
00:29:5d:9c:c1:5f:e5:4e:54:d1:d3:01:26:f5:18:
bc:7a:71:72:22:d5:c4:84:1c:43:e5:7f:e4:bf:48:
13:20:48:04:f0:c5:3d:33:6f:33:66:77:80:72:87:
de:a1:04:74:75:c0:13:21:82:8a:58:d2:4e:70:0e:
6b:6f:14:2c:16:44:57:48:57:06:74:63:99:88:1e:
5d:49:c5:7f:2d:ad:18:c2:b8:29:6b:9b:6f:84:3d:
62:64:59:8f:95:1d:37:c4:26:cb:d3:7a:3d:f9:24:
79:e2:4d:f3:33:bb:8b:c4:b3:9f:05:05:ec:62:29:
41:c5:41:88:97:a2:e0:d7:9f:e3:65:44:b7:44:b3:
fd:61:65:d2:bc:4c:a9:f9:9e:85:9e:c8:4a:9e:5c:
6d:3e:ff:b9:9b:91:2c:c4:03:11:ce:45:5a:a2:b9:
c2:dd:21:bc:d3:40:f0:38:75:57:85:a7:8f:7b:a0:
f3:b6:4f:b0:b0:7e:38:13:c0:2c:92:11:58:85:7a:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:C7:04:0C:45:81:CF:15:24:B8:52:42:CB:B7:58:3B:70:67:50
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:22:ec:2c:58:ac:5d:60:31:76:00:c6:90:f3:6e:3b:97:37:
94:2b:ed:b3:1e:af:81:5d:3e:dd:41:70:b3:9d:4c:60:34:3e:
b6:ad:37:9b:2f:c1:be:ff:15:6a:7e:81:f0:aa:3a:b5:1e:3c:
50:75:ab:fe:be:08:36:ec:5e:74:87:c7:39:c0:95:9b:df:36:
55:a7:30:10:c2:9c:4b:78:5f:a5:b8:7d:09:31:fe:f2:ed:66:
6d:55:8d:80:d1:65:7c:ce:c2:64:61:b3:a8:c3:58:03:7f:f9:
0d:1a:67:19:ee:f4:99:4b:ae:f3:25:b7:42:85:15:4b:eb:57:
c0:f6:e1:1f:1f:55:fc:73:f2:e4:6a:72:5a:7a:c4:80:eb:2d:
ed:8d:75:d3:c4:c6:a5:b9:bf:5b:91:dd:b1:3b:a5:b8:ae:a8:
41:7f:4e:59:bb:53:cc:39:ad:54:e5:47:23:49:0c:f6:1d:05:
21:c0:3c:91:f8:f8:67:7e:b2:db:03:4b:80:46:04:30:1e:76:
7e:43:1e:db:28:a7:45:97:32:ae:58:b3:4c:e9:3c:5b:de:be:
80:4c:d7:1e:ed:25:5a:b5:03:2a:e6:3e:cc:08:a0:95:b3:1e:
ad:e6:1b:05:21:1c:48:73:67:48:c7:08:d4:8e:c3:a2:59:00:
6a:d5:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:06:04 2025 by rpki-client