Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: 3VCw+kq7qyVOrh1+QlxPfNeOf7JPmcpLSBmBWGOscvo=
Subject key identifier: E6:C9:3D:DD:22:2E:66:CC:FD:0B:BD:72:C1:27:B2:6D:F1:EA:58:18
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0197771C5D64B98543313ACDCCE550547B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 0278
Signing time: Mon 16 Jun 2025 05:00:36 +0000
Manifest this update: Mon 16 Jun 2025 05:00:36 +0000
Manifest next update: Tue 17 Jun 2025 05:00:36 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: vvmT6CU5sLHM5a9T3ZiS/x7VC26wUx10Yy8yW8DNyDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:5d:64:b9:85:43:31:3a:cd:cc:e5:50:54:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jun 16 05:00:36 2025 GMT
Not After : Jun 17 05:00:36 2025 GMT
Subject: CN=e6c93ddd222e66ccfd0bbd72c127b26df1ea5818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:9e:2a:e5:cb:26:8d:76:6e:02:e5:0c:68:
7d:e6:d9:5e:64:1d:5a:43:96:8b:f8:10:1c:c1:d0:
2d:a6:89:f0:b7:e5:12:c1:b5:16:d5:f9:a9:1f:02:
87:8e:92:3b:65:bd:fd:67:80:56:91:a4:7f:3b:34:
91:44:68:22:0f:2b:a5:bc:a5:7d:66:3d:63:4f:2c:
8f:66:3f:6b:ab:77:9c:09:b0:15:93:46:b7:3c:ea:
d7:d0:79:05:ea:4b:5e:97:33:e3:72:73:6f:1c:ac:
f2:73:ec:34:ed:d4:3c:32:02:01:d5:4e:d8:55:24:
b6:db:24:08:b2:3a:54:c9:de:98:80:14:aa:08:7f:
72:31:4d:e4:dd:74:d6:d4:09:ee:f4:cb:6f:68:5d:
8a:9d:c0:5f:d7:37:55:a4:46:b6:ac:2d:61:6e:4f:
c4:ba:ff:ed:7a:30:52:5b:49:d1:a6:a6:c6:22:03:
d9:bb:2b:4f:a6:db:15:42:d8:f4:8e:3c:b5:cc:9e:
92:bb:4e:81:33:56:f3:c9:53:e7:66:6a:87:e8:e5:
59:4f:e7:a7:de:b8:38:70:4d:ab:b7:bc:17:a3:29:
c1:f7:33:72:ba:31:55:89:ad:d7:78:7f:d9:4b:1d:
95:21:41:80:b8:33:82:0d:67:08:ee:96:c4:4c:a5:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:3D:DD:22:2E:66:CC:FD:0B:BD:72:C1:27:B2:6D:F1:EA:58:18
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:42:63:30:11:f3:aa:0d:20:e7:2e:f7:e7:9d:3a:88:3b:ba:
2f:fc:02:28:d2:f3:41:35:b3:9e:ed:ee:12:e6:6b:b6:ed:6f:
4a:94:4c:03:66:4d:f9:16:60:20:b4:9f:e8:9a:1a:48:45:5f:
fa:f0:70:71:c2:46:b7:d4:94:01:66:68:93:56:dc:06:c7:8b:
bd:66:3e:5d:dd:37:b8:56:25:d0:6f:a9:83:cc:ac:0b:21:61:
e0:53:68:f6:9a:85:8e:43:8e:cc:fd:f2:11:7d:a3:f3:83:cc:
62:d7:fa:83:d0:20:42:c7:5d:ee:f5:7e:ef:64:88:00:52:d1:
28:ea:76:b9:52:0f:5b:d6:1c:59:1b:0c:53:88:be:c2:3f:36:
05:ee:a3:f1:44:19:d6:3a:a9:d5:37:8d:86:ff:45:cf:df:e5:
e2:e8:6b:a7:8f:2a:73:15:af:93:03:94:5b:f0:96:c9:0c:4b:
39:b8:dc:1d:25:11:64:a4:c9:9d:c7:10:ee:76:2d:ff:39:da:
c4:8f:3c:0a:d8:7e:01:87:15:2d:b0:cf:c7:a3:3b:12:eb:47:
15:46:0a:4c:3a:bb:30:fd:a0:e9:2d:88:ba:eb:a4:91:6f:80:
ed:25:4a:e2:5f:fd:55:cc:54:fa:8e:6b:1a:8b:74:e8:d6:3d:
c5:93:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:50 2025 by rpki-client