Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: hH4QpDJj+CZtS863QfEPC83o3DH73VsmaR6rRJE5NAE=
Subject key identifier: 2B:77:0D:FD:D1:3A:F6:CB:18:71:67:DF:E7:E8:13:3B:D8:BF:A2:9E
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0197594928AE1C0A67AD79AF3E34B6DB118C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 10:00:56 +0000
Manifest this update: Tue 10 Jun 2025 10:00:56 +0000
Manifest next update: Wed 11 Jun 2025 10:00:56 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: MX5gWzKEV3BxmSsv1NzQwNbM6m8y7gUiXX3rq0WlPjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:28:ae:1c:0a:67:ad:79:af:3e:34:b6:db:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jun 10 10:00:56 2025 GMT
Not After : Jun 11 10:00:56 2025 GMT
Subject: CN=2b770dfdd13af6cb187167dfe7e8133bd8bfa29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:b9:09:a9:32:37:7d:8a:e1:e9:85:9c:82:
dd:0d:df:a1:2d:a0:7f:3f:b1:b1:28:71:15:0c:18:
47:be:16:55:df:70:2f:7a:06:c0:22:34:79:5a:29:
e3:40:39:40:8d:35:d6:a5:bc:3c:3b:d8:46:aa:3d:
84:9f:17:01:cf:bc:fe:bb:0e:2a:82:18:2e:cf:35:
9e:00:53:0b:d2:4d:d9:0a:c9:14:b3:8a:12:54:52:
c9:ed:8b:d4:3a:5a:41:e3:80:52:b0:c5:7e:4f:f9:
0b:64:c3:bc:9a:46:9d:cf:bf:95:52:79:78:b6:24:
00:5f:cb:9f:8b:01:f5:4b:92:9f:04:a5:2f:a8:db:
50:92:86:cb:fa:37:cd:b8:13:6e:67:68:1f:e4:7e:
0c:32:17:cb:5f:63:6c:77:09:53:5b:92:43:bf:74:
06:d5:1b:a3:ea:ff:65:0a:3b:5c:ae:9e:d2:62:2f:
4e:bb:73:38:a8:ba:79:7b:50:58:a6:17:a3:42:ca:
a9:5e:88:78:c6:65:89:37:b3:7e:57:e7:a5:10:a2:
af:81:40:8a:11:05:e7:11:56:84:14:78:56:40:bb:
d7:ab:18:d4:b9:75:cd:39:26:5c:a6:40:b6:32:66:
7d:e9:04:03:ab:05:e9:e9:79:10:e9:90:1c:df:d9:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:0D:FD:D1:3A:F6:CB:18:71:67:DF:E7:E8:13:3B:D8:BF:A2:9E
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a1:3d:9c:bc:f9:cc:78:f5:48:ae:9b:f0:89:96:0e:16:1c:
66:6c:9a:f6:cf:d3:4c:50:99:29:aa:a2:db:02:1b:70:4b:b7:
16:07:45:ef:f5:16:80:7d:60:3c:31:2d:ac:46:86:fa:11:66:
3b:13:5b:7f:2a:a3:cb:2d:cf:6e:83:46:8c:8a:a4:a6:22:34:
a8:d8:6e:31:66:1f:d0:45:a6:ad:8e:8f:e8:2e:2e:d7:41:5c:
60:99:5f:66:95:93:0d:c5:19:08:95:54:07:cf:3d:be:52:8d:
46:71:1f:eb:0c:d0:59:d3:99:8c:cb:62:25:81:8c:61:ec:eb:
73:74:6e:a2:f3:07:17:60:b6:57:d9:06:0d:ac:f2:67:cf:33:
67:56:ea:1f:6b:cb:31:40:b6:5d:92:f3:2c:c4:c9:1e:ba:37:
19:c7:9c:6e:e4:b4:a2:42:59:18:5b:f2:50:8a:08:9c:40:e7:
0d:a0:e9:57:7f:10:5a:7f:91:5e:98:46:df:b1:40:5a:0d:a8:
48:dd:ad:1d:e6:d5:e9:b9:88:48:39:ac:6b:54:a6:4a:e1:9c:
5a:ae:a3:2e:3d:1a:7e:86:30:97:45:75:92:91:54:53:27:8e:
b0:fe:2b:40:dc:a4:b7:20:10:d4:b5:3c:b9:38:66:98:8f:97:
3b:77:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:52:57 2025 by rpki-client