Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: x69YSdMofbLrn7xOt2fI32Loc4rg/VQ1VxV+sdpgKqs=
Subject key identifier: 3F:C8:FD:F3:E6:92:C9:1F:94:EF:14:BA:96:5C:C0:87:D7:9B:43:0D
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 01975C1349A2B56DFD51D1FA330F1475CCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 23:00:57 +0000
Manifest this update: Tue 10 Jun 2025 23:00:57 +0000
Manifest next update: Wed 11 Jun 2025 23:00:57 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: MWh9FQUFg8eOaxXDtXHAG+cWo14E182RiwVi9/3EO8Q=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:49:a2:b5:6d:fd:51:d1:fa:33:0f:14:75:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 10 23:00:57 2025 GMT
Not After : Jun 11 23:00:57 2025 GMT
Subject: CN=3fc8fdf3e692c91f94ef14ba965cc087d79b430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:5b:cd:1c:9c:ea:3d:a7:10:f0:d6:2a:a1:
7f:2a:a8:b5:e9:e1:27:e5:01:2c:6e:b2:0a:9e:3c:
9d:fa:8a:50:04:3a:71:ea:9f:68:91:c9:d9:89:1e:
ad:66:0e:53:31:df:33:3a:bf:4e:68:be:aa:6f:b7:
d5:08:ea:5d:b5:2d:7a:5e:f3:c1:88:eb:f6:7b:0a:
e2:7d:8a:a2:48:9a:c5:9d:09:55:ad:75:6c:f6:dc:
ce:a7:6f:ea:1b:1e:e3:ad:17:93:b0:80:50:ba:98:
83:c4:ce:be:c8:d6:51:0d:6d:d4:bb:fb:44:0a:e5:
f4:99:4f:95:6b:13:1e:67:c1:a2:4b:08:1a:78:f3:
8e:da:43:43:2b:8c:1b:79:5a:8e:36:16:b9:b2:33:
22:da:be:15:ff:57:e7:b5:81:84:5a:a5:7b:09:b1:
77:f5:ee:71:9f:9d:91:aa:28:ee:21:a6:0e:ce:42:
4d:da:d8:ad:c6:13:bf:8b:77:0c:15:6b:31:fa:cf:
e9:b9:65:a7:1a:18:07:bb:d8:72:63:b5:f2:3b:a0:
8b:ce:97:6f:7f:c1:32:bc:43:aa:fd:1c:5d:a3:a6:
9f:b2:27:32:72:e3:25:d7:ae:76:bf:12:bf:55:27:
c2:4f:80:1c:ab:34:f5:c4:c7:fe:8f:c9:fc:d1:5f:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C8:FD:F3:E6:92:C9:1F:94:EF:14:BA:96:5C:C0:87:D7:9B:43:0D
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:77:aa:77:9d:46:1c:5b:a7:8b:df:c7:cc:58:2c:0f:01:2d:
30:a8:41:da:6b:66:20:bb:93:e8:0c:89:54:69:01:c2:b5:63:
a0:39:ae:8b:ab:b6:57:da:96:e9:ee:49:1a:7e:f5:27:cc:cb:
65:7f:f1:44:88:97:34:35:cf:d3:41:85:18:3a:22:8a:39:8e:
3e:17:1f:38:b1:fb:72:7b:e3:60:a3:6b:22:88:d7:c8:ff:55:
87:7e:2a:96:1b:b1:4f:e8:da:4f:f8:42:ef:6b:5e:47:5b:a2:
46:6e:16:0c:00:c3:d0:50:0d:9a:37:64:23:02:cf:9f:4f:75:
27:d7:5c:9c:64:54:cb:ee:3a:31:2f:fe:f5:a2:76:78:b6:47:
a3:69:40:b1:3b:88:cd:3d:cd:40:f2:0f:d9:b8:45:38:1e:1c:
64:43:53:94:54:d7:38:06:42:63:be:ef:96:ec:9f:ff:34:3d:
46:e9:b0:3a:4b:ff:f3:04:7a:34:7b:c0:0e:a4:62:44:35:1f:
5c:ed:e2:a7:cc:f1:a2:da:2b:da:79:f7:d5:a1:2a:3a:10:50:
b6:78:ed:4c:08:83:5b:b7:a2:f5:9b:ae:85:ed:b2:75:41:c9:
e3:60:c7:38:ff:d2:87:70:04:14:b2:9d:d9:49:25:95:50:98:
fb:a1:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:52:48 2025 by rpki-client