Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: w2JeWAI569beOZGIMgdhnswiOnJzTXD3ebTfFgn8S40=
Subject key identifier: 29:B2:29:6F:E8:AB:A2:F8:6F:C0:25:92:46:3D:32:E2:E5:44:F2:65
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 01974CD76F4AC1B0FB14E91853F49FB930AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 00:01:16 +0000
Manifest this update: Sun 08 Jun 2025 00:01:16 +0000
Manifest next update: Mon 09 Jun 2025 00:01:16 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: n0zBV2XhQ7aQzD839TAWTnhDQIY5gevH+SG7S54kWIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:6f:4a:c1:b0:fb:14:e9:18:53:f4:9f:b9:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Jun 8 00:01:16 2025 GMT
Not After : Jun 9 00:01:16 2025 GMT
Subject: CN=29b2296fe8aba2f86fc02592463d32e2e544f265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:3a:af:65:c3:f0:d5:74:19:0f:11:0a:70:
cb:4f:5f:81:c7:74:88:b0:f5:90:7b:bb:1b:c9:fb:
cc:aa:57:51:ae:ff:1b:d1:03:33:a7:9b:e0:c7:39:
57:6f:2f:d8:33:bd:8a:4a:de:15:06:0a:48:d4:68:
ca:29:87:ae:96:e1:b8:b4:bd:28:eb:db:89:c0:1d:
d2:dd:97:b9:17:85:81:15:0b:0e:bc:ef:56:f5:ba:
5a:5f:ca:02:c9:e1:fc:68:1b:f2:72:d0:5e:dc:fb:
3d:ca:ea:18:08:86:6e:8e:87:b6:b2:7d:bb:94:5f:
4d:e8:c5:20:09:f4:86:a6:ec:8d:3c:4f:ba:bf:0e:
e3:bd:80:b3:eb:66:74:b5:fb:ab:73:5d:63:8e:81:
1b:94:a2:26:3d:38:bc:eb:fa:69:4a:a7:44:ed:b5:
26:9f:c9:fa:ae:0c:5b:1e:79:b2:ca:4c:bb:41:c9:
d7:c6:7f:e7:1d:14:3e:28:2a:be:e9:94:32:20:8c:
fd:4b:24:ab:7d:7a:97:68:a6:9e:0e:a6:f4:dc:55:
c1:55:96:22:fb:78:74:26:41:b9:bd:8d:7d:fe:c3:
1f:e9:fd:68:51:3c:16:48:00:8b:6d:07:7c:ac:02:
d1:e8:62:8f:fb:d2:19:54:78:5f:d3:35:c5:bf:5e:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:29:6F:E8:AB:A2:F8:6F:C0:25:92:46:3D:32:E2:E5:44:F2:65
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0c:0a:5a:1f:96:6e:f7:86:0b:9c:9c:f6:76:60:6a:72:00:
b6:14:5e:7a:eb:1b:49:ad:fc:4b:73:72:c9:0c:d2:f6:66:72:
51:1d:ec:e4:33:db:5f:f8:c3:39:cf:eb:38:1b:ee:ad:98:ea:
f7:d2:26:7a:f3:95:41:d5:14:7b:a2:e0:47:2c:a8:74:e9:89:
b5:da:36:20:96:44:84:18:b5:2e:7c:3d:28:b5:b6:73:f2:a9:
54:b6:6f:ae:20:8e:71:62:e1:eb:62:ac:17:b6:9d:82:db:a2:
74:fa:21:f4:a8:22:19:8f:d1:99:a8:c5:18:fe:8e:53:9c:1f:
98:d1:23:f1:18:27:3b:4d:a6:ea:ea:eb:c2:ed:2e:c2:5d:b1:
af:ad:7d:61:b1:3e:cc:a6:ba:60:9f:ce:59:a2:51:59:ba:8f:
bf:aa:5d:2e:1e:88:27:77:b2:47:7f:eb:67:79:1d:de:ca:d7:
be:72:ac:c2:52:e9:dc:01:b3:ed:cb:5f:3e:3c:39:31:8f:af:
dc:7d:51:49:f0:28:03:76:10:a1:62:26:5a:25:2c:1e:b8:7a:
47:71:82:7a:41:91:22:0e:bc:25:96:f5:3c:58:c4:d6:bb:1e:
87:77:55:35:c0:b0:34:f0:93:30:a6:50:9f:46:a6:c1:7a:df:
c7:97:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:10:07 2025 by rpki-client