Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: D9BO5na6VNqAXIHUr7l55pdmXkz9tMb+jTDW1XreanY=
Subject key identifier: D2:90:AF:53:D7:19:44:14:1A:6F:24:95:F6:2D:30:F2:2F:4E:29:E6
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 019768F2F828FD154D8E9CECB2F571F6533C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 11:00:43 +0000
Manifest this update: Fri 13 Jun 2025 11:00:43 +0000
Manifest next update: Sat 14 Jun 2025 11:00:43 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: PQ4wy1qOtT6iqFO4uXAbBAbO3QzaZNqUcvM53/gmlKc=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f8:28:fd:15:4d:8e:9c:ec:b2:f5:71:f6:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jun 13 11:00:43 2025 GMT
Not After : Jun 14 11:00:43 2025 GMT
Subject: CN=d290af53d71944141a6f2495f62d30f22f4e29e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:33:a0:d8:66:17:a5:a6:12:ad:08:8e:a7:
89:de:df:b8:fe:b1:bc:43:53:8c:4b:8e:6c:41:ec:
aa:5e:e4:e9:7f:4e:0d:f2:3e:e3:90:70:05:6e:63:
28:23:fe:d1:4e:08:b4:db:94:30:6a:fb:46:06:18:
eb:75:d0:ba:ae:de:8d:91:70:52:3e:b9:43:b7:56:
fb:32:81:20:f0:84:82:01:00:c3:12:e4:5d:6d:e3:
06:fb:f5:49:40:ba:dd:35:9f:f3:ff:66:6e:76:47:
64:8f:f2:34:e9:3c:3d:14:c6:70:68:c3:8d:e7:8d:
15:7b:14:c8:b2:57:f9:5d:79:9d:38:b7:0a:54:3a:
5d:ac:b1:a8:0b:56:ef:46:06:8e:1c:de:de:0f:68:
c6:a8:64:ff:ee:37:46:f0:8c:dd:1c:5f:fc:bf:83:
ad:e9:fc:ea:e9:ef:41:83:63:c4:af:26:d0:8a:98:
15:a8:54:41:60:0a:37:b5:48:13:a9:51:96:ae:c7:
47:cd:7d:11:d1:a3:e3:e6:58:74:a6:82:c4:31:f5:
a5:d8:04:3c:5c:68:08:17:a3:c9:da:27:2c:57:07:
51:75:bc:f0:6b:d1:4f:cf:e9:52:e2:84:eb:24:34:
91:b0:91:f4:23:03:75:4c:3f:66:89:fd:2a:02:05:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:AF:53:D7:19:44:14:1A:6F:24:95:F6:2D:30:F2:2F:4E:29:E6
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:f0:7a:46:3d:72:d9:06:40:c6:fb:49:95:2c:b7:e2:7e:
17:1b:ac:5c:79:17:74:6b:ac:8b:4a:ab:b9:a2:05:b4:b7:42:
e7:72:b1:f5:ed:4c:ec:2d:c6:d3:66:5c:49:d9:a0:39:95:f8:
c3:5b:bc:cd:4c:a3:f1:aa:b2:a0:02:0c:0a:ed:44:00:a1:da:
f0:55:56:97:f9:09:52:64:21:d0:e4:9b:2a:48:67:73:2c:19:
43:0e:2a:0b:12:1f:e9:4b:a1:5b:b7:4f:0a:74:a2:12:88:01:
4a:74:9f:d5:00:e8:b2:93:a0:83:7e:9b:92:07:cf:e9:06:f4:
1b:44:10:38:8f:37:98:c5:c8:74:70:c4:56:1e:d7:45:3c:1e:
42:c8:41:5c:95:47:c7:42:08:55:13:69:c6:2a:a9:19:b0:14:
bd:18:15:77:bd:8e:49:22:ea:c3:a2:b0:d5:b0:d5:d5:f8:84:
08:46:38:98:2d:3e:13:ea:43:a1:91:30:2f:66:a3:47:8e:d5:
4f:5e:01:9e:fb:c5:3a:df:43:62:f7:af:d5:ae:aa:c9:e4:c3:
2f:6b:46:59:90:55:09:15:13:53:f4:f9:c9:01:c1:2f:fb:e2:
ff:ec:5b:e2:cc:6e:4b:1e:b6:c3:28:4d:fd:b8:e9:8e:35:e5:
c2:76:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:33 2025 by rpki-client