Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: RwIEqqrFrEhQa4HsWmxPMt7O4AzwxSNMhLTZqqdVo2A=
Subject key identifier: 6C:70:03:57:5D:9A:F5:E6:6F:EE:C0:9B:F0:C0:38:CF:24:14:76:94
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 01977A1D4194AA03C520499A1755D7CB698A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0D64
Signing time: Mon 16 Jun 2025 19:00:27 +0000
Manifest this update: Mon 16 Jun 2025 19:00:27 +0000
Manifest next update: Tue 17 Jun 2025 19:00:27 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: JObd7MO5q21qTYHC2zkEg6btJMQobmct/p80nyXTCa4=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:41:94:aa:03:c5:20:49:9a:17:55:d7:cb:69:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jun 16 19:00:27 2025 GMT
Not After : Jun 17 19:00:27 2025 GMT
Subject: CN=6c7003575d9af5e66feec09bf0c038cf24147694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0c:e5:9d:3d:69:a4:27:e5:f9:4c:bf:2e:32:
a4:00:59:00:b4:87:59:79:ce:69:5d:8c:78:32:ab:
14:3a:74:a0:bc:fc:73:48:f1:ce:93:4e:8b:30:14:
e8:22:58:4f:92:39:0e:e0:a6:5e:16:5a:89:43:74:
b9:79:da:f4:26:4d:b1:fd:e5:4a:4d:b1:4e:0e:ab:
6b:c6:fc:9f:4b:6d:38:b8:36:ab:ce:d6:c1:57:c1:
be:0d:1e:d4:c1:67:39:ad:aa:16:30:15:45:d9:39:
43:f1:e7:c3:08:75:ab:fd:aa:42:13:15:a3:3d:94:
2d:15:03:0b:20:7f:e2:c3:20:bd:71:4d:fc:f9:62:
c5:24:28:5f:5b:7e:dc:98:4d:c8:ab:2e:4b:ac:80:
8d:ab:4c:0b:13:86:d1:0a:ee:11:ce:04:9e:f3:0b:
ed:3a:68:53:2e:2f:98:69:1c:1b:ab:30:6d:f7:08:
0c:fc:0a:d7:4e:47:68:b0:a4:0a:08:fb:a0:63:85:
a0:44:d7:97:4c:36:ed:51:68:5a:81:38:e5:28:09:
66:26:a0:c5:a0:1d:68:ae:21:ae:df:f6:31:a1:9f:
4b:85:65:e7:aa:d5:a3:a8:58:fb:23:66:9c:99:36:
eb:c2:6b:1b:18:b4:6d:b6:26:e0:a8:67:24:bd:55:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:03:57:5D:9A:F5:E6:6F:EE:C0:9B:F0:C0:38:CF:24:14:76:94
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4b:2e:c1:f7:9b:ef:1a:b7:2d:82:2a:f4:75:5e:31:c9:4c:
a8:16:38:fe:e2:78:41:95:ea:b2:7b:a8:43:2f:ba:34:59:56:
c0:39:c0:5d:a0:ee:b3:99:84:01:f0:9d:34:fb:7d:be:93:04:
3a:57:71:da:8c:2d:a7:d0:b7:41:c6:67:e8:a7:6b:a2:ad:ba:
6e:9b:89:1e:3e:29:08:9b:d1:68:b7:6b:2d:58:75:34:6e:e6:
60:46:a5:61:d2:9f:5e:30:d7:53:a5:02:6e:c7:15:c2:e2:9d:
1c:4e:67:e7:ec:5e:b7:78:f7:65:11:68:a5:9d:09:d2:9c:d0:
b7:f4:68:58:19:c6:5d:bc:79:40:99:c1:bd:30:69:94:e2:de:
69:fe:16:0e:26:bd:27:e9:0a:bd:df:7d:5f:fa:ac:b5:54:31:
13:21:8c:00:dd:75:5a:e3:a9:cf:36:7b:b8:64:00:f3:53:b8:
36:a9:38:27:e5:37:95:d7:80:f5:88:83:1a:12:dc:0c:8e:d1:
3f:f0:59:4d:bf:9e:29:da:0d:e0:4c:67:7e:73:c5:be:1d:c1:
43:73:54:ff:a9:d3:a5:ad:c5:83:45:63:f8:49:d5:eb:6b:2f:
bf:75:97:de:f3:1a:b6:73:e6:e9:07:cf:0c:71:22:48:50:4b:
c4:bd:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:41 2025 by rpki-client