Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: 2G6tgZEH0Amqz01CYb3QMXKpLKKofy4wdJBeh6sMZT4=
Subject key identifier: 4E:4D:A6:65:2B:AE:DE:6D:54:69:3B:75:92:4E:0D:EE:43:97:48:BB
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 01976E508BB2705D4092C3A5186BF56E13C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1188
Signing time: Sat 14 Jun 2025 12:01:01 +0000
Manifest this update: Sat 14 Jun 2025 12:01:01 +0000
Manifest next update: Sun 15 Jun 2025 12:01:01 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: xIVK/LeA5aL8piF0FxQ/aj8VbhPGNvAr5QugcA3Aq/s=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:8b:b2:70:5d:40:92:c3:a5:18:6b:f5:6e:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jun 14 12:01:01 2025 GMT
Not After : Jun 15 12:01:01 2025 GMT
Subject: CN=4e4da6652baede6d54693b75924e0dee439748bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:9f:e9:0a:5a:43:30:ff:f1:87:a1:88:03:
d5:f3:63:ca:d2:6a:08:15:cf:10:3b:e2:0e:ba:05:
d5:46:1c:23:a2:44:45:f8:42:ea:83:5e:cc:2e:7f:
60:29:06:7c:a3:fa:83:a7:dd:25:f2:b0:97:f1:e1:
47:bc:10:4b:dd:12:ab:d5:09:32:ea:d1:b3:81:05:
9c:6e:d0:c0:06:ef:e4:4c:e8:58:6d:b1:4b:a0:f8:
3d:e4:d5:ba:bd:12:14:a0:30:a4:28:04:f3:86:27:
26:70:37:1a:81:3e:5e:80:bb:66:32:17:49:1a:e8:
33:dd:7f:7c:07:28:a7:fb:17:e2:62:11:a5:fe:c1:
d3:a1:f9:eb:fd:0e:e6:75:1d:60:82:98:91:78:eb:
c2:2b:7f:c8:1c:02:36:38:2f:53:f9:f4:7b:34:d9:
ce:55:99:dd:14:fd:0c:da:f0:0b:91:c3:fa:fe:32:
8c:76:d3:14:f9:d2:cc:d0:74:64:e7:24:ea:0f:da:
56:d1:2e:4d:dc:18:3a:25:18:1b:91:10:73:d6:6b:
8d:cd:0c:0e:fd:35:96:76:fb:e7:0f:d3:21:11:01:
49:5e:72:09:95:73:cd:44:06:e7:df:bb:4c:3b:84:
43:94:ce:7f:b4:ad:15:59:a0:18:e1:0c:64:d1:8a:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4D:A6:65:2B:AE:DE:6D:54:69:3B:75:92:4E:0D:EE:43:97:48:BB
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a8:6e:3f:28:94:33:a9:bc:f3:52:bd:15:7a:ff:2b:f2:bb:
af:b1:9b:9e:67:63:ad:e2:50:5c:84:f6:f3:05:cd:b4:2e:6e:
2a:4a:d2:d4:8b:0a:4a:44:92:36:17:a3:ae:5f:7e:c5:64:e4:
e0:64:d4:c7:94:6b:f0:73:fb:85:d7:f8:08:73:17:e4:8c:44:
d5:5d:d2:ca:c1:bb:dc:4a:1c:e5:0e:2a:e7:44:24:c0:d5:8a:
ed:6c:94:f2:95:fa:57:aa:e7:2d:8f:d5:70:4b:dc:2a:63:e4:
24:dd:61:17:5c:9d:d3:d9:16:dd:18:fe:8b:7c:9d:4d:4e:0b:
65:fc:40:20:fb:26:41:87:7a:55:ea:39:7a:94:75:3d:f9:38:
ae:60:92:ff:32:8d:54:ea:46:9d:73:cc:13:f8:64:24:c2:91:
55:0a:34:2a:f4:34:61:74:81:6a:2a:d1:04:b5:b1:3e:5d:69:
23:76:3f:67:de:94:23:cc:0c:31:7d:bc:67:b5:03:be:5c:f7:
84:6c:2d:80:e7:d4:47:23:3e:42:2e:76:31:e8:2a:6b:15:df:
30:42:b9:92:17:22:ca:ba:8e:d4:af:3c:48:a8:42:40:67:2e:
15:48:e2:20:cf:ea:0f:a1:1a:3f:5d:18:fd:5a:ad:04:74:96:
7d:e4:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:29 2025 by rpki-client