Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: R8tDsacDK8hI0c0ADsmFZ1mo724mNn83KwW7WpXZhRs=
Subject key identifier: 9D:B0:0E:96:71:71:79:A1:CD:2A:02:9A:B1:B9:8E:B7:AB:71:F2:E5
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 01976C988D985413C2528F146B44D209D785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 1052
Signing time: Sat 14 Jun 2025 04:00:26 +0000
Manifest this update: Sat 14 Jun 2025 04:00:26 +0000
Manifest next update: Sun 15 Jun 2025 04:00:26 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: OOSodQfM3AcfjmfmjWa72ckLDpjMGd80l8wtvIMDatA=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8d:98:54:13:c2:52:8f:14:6b:44:d2:09:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jun 14 04:00:26 2025 GMT
Not After : Jun 15 04:00:26 2025 GMT
Subject: CN=9db00e96717179a1cd2a029ab1b98eb7ab71f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:4c:60:01:8b:aa:88:37:9d:e6:5a:2b:14:
3b:a6:6b:ab:4d:f6:4a:25:65:4b:66:94:40:1b:b0:
57:76:f6:f9:0f:f1:ae:58:74:ef:b0:16:fc:d5:3c:
cf:d4:c0:cc:1b:d5:23:d7:b3:5d:ef:8d:8d:dd:b5:
7b:13:b7:be:97:ee:a7:f6:64:09:48:23:e7:89:b8:
f7:72:b1:d9:23:14:80:a4:f5:99:41:79:da:75:99:
7d:49:30:02:ec:b5:df:72:53:a6:c4:c7:1b:c0:a3:
55:43:c0:ce:5e:4d:b0:ba:2e:46:ab:05:2d:db:87:
c3:60:52:80:27:91:65:4d:4f:01:f2:01:01:4a:48:
5a:1a:7f:8c:8b:ee:02:ac:fd:f1:23:f8:88:c0:07:
85:d2:05:3e:82:dc:d9:9c:78:82:5c:93:97:55:f8:
99:42:c2:3b:73:8d:bd:0d:a4:46:5e:e1:86:8a:44:
ce:23:7c:d5:8c:f4:9f:7a:82:a9:14:0c:86:92:9c:
3c:c1:c2:44:a3:6a:3d:79:63:57:b9:08:8c:19:48:
12:80:b3:e7:8b:45:89:d4:e2:bf:2c:dc:d3:bf:3c:
be:15:f2:b8:58:7a:dd:95:12:d2:f4:a9:61:8b:2b:
96:8a:79:ef:59:43:57:6f:4f:7b:b9:9d:6f:18:a3:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:0E:96:71:71:79:A1:CD:2A:02:9A:B1:B9:8E:B7:AB:71:F2:E5
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:32:32:9a:3b:cb:e2:ed:de:8b:76:d2:1b:49:da:87:6f:6f:
1a:fa:5f:76:46:91:3c:6e:57:a9:b8:02:6b:be:19:da:0d:18:
2d:02:81:c8:8c:9d:2d:79:04:8c:22:ab:fd:4f:fd:4a:b5:c1:
28:b2:e9:44:51:c7:6c:db:df:96:f6:a1:6b:c3:f1:a3:e0:ea:
22:7a:00:f0:53:cc:ec:98:0e:7b:42:bb:43:e9:fb:ea:ba:9a:
37:44:94:1d:72:57:7d:29:cb:5d:86:27:db:c0:e2:9f:2e:b3:
cf:c9:db:b7:45:3a:b4:73:42:53:58:92:1f:f5:5e:1c:fd:0c:
7f:fb:ba:4f:50:fc:f0:a4:0b:cb:57:3f:f6:81:02:76:9b:9d:
cb:3e:f5:91:8a:69:05:4b:09:8d:54:9e:9f:4f:fb:c0:16:b2:
d3:ec:53:af:85:93:da:58:41:ca:5b:9e:a1:7c:5a:5c:3e:34:
6f:cc:11:96:6b:9a:82:43:5c:57:bd:5b:af:67:d6:8a:81:bf:
4e:69:73:d8:15:92:c2:db:84:12:27:38:50:2c:6e:0a:06:2d:
99:13:91:24:64:e0:8c:df:04:47:78:81:b2:fb:25:8c:e2:cd:
f9:47:d6:c1:08:44:6e:16:d8:ac:2a:e3:bc:26:3b:c1:47:ea:
ce:2a:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:19 2025 by rpki-client