Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: 01DP/g7Z0++MXAiGZ/mEeD/wA3VpKuFwzONl+cAjNn4=
Subject key identifier: DB:37:8D:06:57:41:A0:B1:B7:D3:A6:10:D2:41:DA:DE:C6:9C:0A:E1
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 01976997E35E9735ABEB77ECAE021DEC091A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 14:00:51 +0000
Manifest this update: Fri 13 Jun 2025 14:00:51 +0000
Manifest next update: Sat 14 Jun 2025 14:00:51 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: 0QHIBwHIgokN28Xdiapj8u87hHcq1LY8R2KKVFCbZP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e3:5e:97:35:ab:eb:77:ec:ae:02:1d:ec:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Jun 13 14:00:51 2025 GMT
Not After : Jun 14 14:00:51 2025 GMT
Subject: CN=db378d065741a0b1b7d3a610d241dadec69c0ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:ef:ab:a5:ed:99:3e:ea:42:02:6f:50:25:
fe:c6:95:8b:ef:31:f9:9c:e2:e9:d2:33:9c:bb:a4:
82:8c:d2:d5:65:d3:75:4e:9f:df:c4:c6:e0:66:5c:
39:93:30:8e:bc:9a:f6:3f:e2:68:82:1b:72:31:06:
f4:bb:e1:46:8c:9f:01:c6:3e:0e:e9:2a:85:2c:8a:
9d:4b:05:f5:aa:b6:d6:63:16:a7:98:07:53:a5:0e:
e0:88:6c:98:0b:c7:fb:df:95:79:aa:8e:40:53:46:
45:d7:91:4c:86:76:f0:d7:ca:48:ab:63:3c:43:b2:
cb:62:8b:dc:f6:72:83:12:d7:be:1f:cb:2d:3a:89:
55:86:85:c6:8f:fa:d5:53:65:8f:48:c9:df:1e:f3:
b3:9b:4c:4e:b2:8a:52:dc:cc:40:96:43:b5:01:ec:
f5:bb:20:5a:27:73:b7:97:64:6b:ec:c5:06:41:ce:
2c:da:ba:59:b3:48:86:91:85:e5:df:32:e2:c3:4f:
91:32:5b:82:e2:04:12:72:b2:f5:72:80:bc:7d:a4:
e8:59:a0:48:6f:78:4a:c1:51:f8:99:22:4d:1c:6c:
42:f6:bc:11:07:ef:cf:f7:69:9f:90:1a:8a:c7:9f:
a3:78:42:78:90:d7:a0:c7:85:88:79:45:e7:d7:5a:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:8D:06:57:41:A0:B1:B7:D3:A6:10:D2:41:DA:DE:C6:9C:0A:E1
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:53:83:aa:95:7a:79:39:d2:1a:01:c1:40:13:a4:e7:25:df:
cf:77:72:a4:af:f9:4f:56:d8:e2:8c:fe:bf:80:fb:bd:c9:e2:
d0:40:4d:46:3b:f4:b8:79:97:8f:1b:df:cb:59:ca:08:06:04:
ba:5a:ff:d6:3b:63:c2:e9:10:d2:fe:4b:98:c0:66:6f:ef:d0:
89:cd:5e:e4:c2:91:a3:f7:58:23:74:15:e4:fb:fa:36:2f:25:
31:6b:62:94:9c:a8:34:05:1a:db:ee:c4:a6:5a:65:6a:27:ed:
3f:a8:cb:e5:26:49:11:c6:a1:34:06:dc:69:00:0c:da:c1:79:
4f:0c:f2:fb:b5:3d:02:24:b0:fc:11:ff:53:cd:4b:fd:6f:7d:
4a:e6:6e:99:02:e6:00:6b:11:2f:fb:0b:a2:db:5d:55:4c:b3:
c1:8b:f8:84:29:cf:d0:81:12:50:7e:9e:2d:87:29:17:e2:24:
79:2a:2f:1e:e4:2f:92:83:9d:1d:8a:66:2f:48:ad:fb:fe:c7:
77:a3:fb:32:b2:82:71:69:cf:89:f3:b0:e8:70:7c:74:23:1e:
a9:5d:cb:04:96:a8:6c:37:85:b2:01:23:16:9b:c2:0a:c6:07:
21:7a:87:0c:b6:e1:c7:2d:d2:c5:2d:15:32:62:eb:0f:0f:f3:
e1:5f:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:37 2025 by rpki-client