Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: /dDXM4uj+kxoh5u4hfmDQaxPgRoH+2NqNhyoJR6dC0s=
Subject key identifier: 99:6A:77:33:D0:8C:24:F7:50:E8:B1:B4:DB:C9:64:5F:80:1B:54:28
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0197556C73E316AB07D15CC18401EA3CE216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 16:01:00 +0000
Manifest this update: Mon 09 Jun 2025 16:01:00 +0000
Manifest next update: Tue 10 Jun 2025 16:01:00 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: QaJ3x0uuAgj3KT24Zt8L0SEgSKOwubCI4VMwz2ba9Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:73:e3:16:ab:07:d1:5c:c1:84:01:ea:3c:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jun 9 16:01:00 2025 GMT
Not After : Jun 10 16:01:00 2025 GMT
Subject: CN=996a7733d08c24f750e8b1b4dbc9645f801b5428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:28:0e:fd:a2:e9:dc:a0:c8:1d:ba:e2:8f:
1b:a9:9c:53:74:f2:4f:a4:d8:85:74:79:44:8f:db:
6b:84:29:80:d5:59:22:df:20:4b:30:8c:06:2c:9f:
f2:e9:96:15:cf:b4:01:10:28:cb:4b:bc:f4:40:00:
cc:b2:5e:7b:42:89:d7:e3:98:90:9d:ca:4e:88:7d:
cd:21:5e:2f:1c:d8:07:37:02:9e:a1:a0:16:56:8f:
f9:a7:9f:84:05:40:b4:a4:12:02:c0:4a:61:7e:b2:
d2:fc:4b:5b:df:e5:03:46:0f:05:57:f6:96:a1:ef:
9d:10:77:82:c8:05:f4:97:5a:99:1a:be:54:4e:46:
ca:c1:9a:97:b2:0e:ec:e3:28:f3:6a:49:b4:10:fd:
6e:a8:54:ee:c4:f8:7c:2e:96:9b:c0:17:05:aa:01:
96:69:bb:db:e0:e7:f1:cf:94:64:f0:c2:ab:f4:f0:
44:13:7c:9a:91:f9:3e:e1:58:8a:17:0f:6a:48:44:
48:67:6c:69:94:2b:11:f1:b9:99:15:02:21:da:ca:
36:54:fc:7f:c8:1d:de:f3:21:c1:10:65:3c:47:8c:
17:20:8e:66:b1:1d:3c:4f:4f:47:7a:a3:de:8a:35:
e1:c7:85:18:21:d5:3b:ea:9b:38:4c:ee:69:4f:9f:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:77:33:D0:8C:24:F7:50:E8:B1:B4:DB:C9:64:5F:80:1B:54:28
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:df:d8:73:25:06:fe:ad:6e:37:ad:0c:73:40:b1:fd:e3:6e:
e5:f3:f8:e4:1b:02:b3:dc:54:ee:91:3a:82:06:9f:35:49:0a:
31:e0:f6:f6:fa:25:ef:bf:2f:88:f7:8d:54:d4:c3:27:ae:6c:
56:90:2b:00:31:24:f5:1e:b1:6d:79:1a:3e:c5:eb:6d:f2:59:
27:6e:21:43:57:54:fc:01:8b:ba:4a:27:2c:83:b4:d4:1e:cc:
29:22:05:fc:ba:01:df:f8:84:d1:95:54:2a:15:a4:40:66:cc:
d5:9c:ed:c2:04:e8:ac:93:1a:c1:ac:e7:a9:e5:5f:b1:fe:a4:
83:ba:3f:73:a4:d7:c7:09:3e:d6:6d:38:21:a3:da:c2:35:e0:
88:db:ab:50:4c:11:09:1c:86:91:36:6a:6d:37:84:f1:7a:a4:
9c:0d:d2:81:75:a5:c8:58:49:d0:b5:19:8d:36:92:c2:b0:32:
24:c3:2c:1d:15:17:b6:28:6b:dd:f3:31:19:8f:f7:62:54:96:
3e:85:ce:2c:d0:1e:96:df:0d:60:2b:01:63:95:34:11:6f:f2:
e6:85:42:b6:be:d7:ed:d7:70:d7:02:a6:fd:5f:ea:59:9d:fb:
cc:e3:cd:22:4c:59:f2:ab:1f:f8:ec:9b:5f:15:08:d7:eb:2f:
1f:b1:73:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:15:12 2025 by rpki-client