Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: rqKJ805f5gJK9pZjoLbZBcX0I6XlDpEsimSXMR5OG28=
Subject key identifier: 8D:E2:0D:74:83:3F:83:ED:B1:26:D7:AD:DC:7D:91:41:EC:70:15:A1
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 01975647B69862E5589D7DBD30BEBD9CC051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0164
Signing time: Mon 09 Jun 2025 20:00:29 +0000
Manifest this update: Mon 09 Jun 2025 20:00:29 +0000
Manifest next update: Tue 10 Jun 2025 20:00:29 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: W8G8G6hP8EDh1R2NdtUJNg6BQJRChJFz17bqWMsZDCU=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:47:b6:98:62:e5:58:9d:7d:bd:30:be:bd:9c:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Jun 9 20:00:29 2025 GMT
Not After : Jun 10 20:00:29 2025 GMT
Subject: CN=8de20d74833f83edb126d7addc7d9141ec7015a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:d5:ee:71:46:5b:bc:6d:66:a5:b2:ff:e3:
13:c6:36:89:86:5a:41:50:92:27:e9:21:06:88:83:
7d:13:a7:5f:15:1d:a2:52:af:3c:87:f7:9a:0f:89:
e1:92:07:0a:a8:50:ae:ad:14:38:e6:23:50:69:43:
d8:ac:d6:f4:37:a7:04:31:66:f1:f6:f2:d9:4e:a2:
a4:a7:20:12:ea:4f:63:71:00:b4:20:86:7e:65:8c:
0a:bf:c4:f5:da:d5:5f:63:f3:8f:15:48:b8:45:2d:
ab:d8:65:bf:46:2a:11:a5:a8:57:49:8f:8d:e3:55:
48:1a:1f:c7:90:ed:b2:dd:25:ea:74:13:fe:6e:db:
3b:9f:6f:92:cd:d6:96:12:a3:b4:a7:00:98:ab:75:
62:8c:a4:ee:11:b6:7c:7a:41:4b:e1:35:c7:c2:bf:
5c:db:55:fe:eb:60:14:23:b5:59:bd:78:00:96:4b:
9f:57:8c:5c:bb:b5:31:22:c7:bc:5d:b2:f9:b2:b8:
51:d5:2c:58:89:e5:f5:d7:a5:12:b9:91:a3:ef:55:
ba:4a:86:ed:0f:ad:f3:03:c9:53:18:e4:18:de:98:
de:1f:ac:f0:59:2a:33:73:f6:f1:ed:d8:9d:cf:75:
06:b0:22:53:bc:2c:08:03:04:be:91:f5:69:32:3c:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:0D:74:83:3F:83:ED:B1:26:D7:AD:DC:7D:91:41:EC:70:15:A1
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c4:16:fd:75:88:97:ca:39:17:a1:30:f0:3a:7b:a1:e5:6c:
d3:50:2e:0f:63:f0:5a:73:ca:41:55:a5:5a:bd:f7:91:38:81:
15:8b:8c:58:f2:e0:8b:b4:f8:68:44:a4:c2:4f:12:3d:38:d0:
8e:f9:9a:7f:32:7a:a0:24:4b:fd:e2:67:60:30:b7:f7:91:4b:
ca:14:ff:78:1a:ba:c6:a2:48:f9:db:8f:ec:8d:d0:4e:ee:e7:
62:ca:11:ef:2a:5f:ee:13:67:4c:89:7a:7b:6f:cc:21:06:f3:
cd:de:c6:0f:d4:e5:89:6b:23:be:58:8b:83:cf:b2:b7:6d:06:
43:4d:31:88:5f:df:cf:27:1f:e0:8f:27:2f:2c:e8:96:4e:40:
25:69:29:d1:a0:87:b2:e6:20:58:3a:12:03:2c:54:76:ab:68:
1d:c5:5d:1c:d5:ea:c8:8d:78:73:d9:6a:72:d5:82:e1:32:b2:
13:f5:7f:64:ae:0a:4c:8b:ab:a9:3d:f9:37:5a:f4:1b:30:a5:
c8:b8:3d:e6:ba:65:b2:0a:08:38:85:d0:8c:d3:39:76:f5:30:
b0:c6:a0:49:a2:b7:98:de:e8:83:71:e3:82:0d:a9:c1:26:46:
73:8b:f2:91:54:e0:06:de:bb:8c:e8:82:bf:db:fb:72:22:d6:
c0:49:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:07:28 2025 by rpki-client