Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File: 5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier: 9fcWNrAD31eYkq8OUgndq/MAnMAg2RjGFH+HZ6BMAIE=
Subject key identifier: 01:B4:F6:4C:8D:E4:94:CB:63:94:B6:A4:97:65:EB:79:BB:72:8D:1F
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial: 01977C430125CFD382E53FF25997EB3C5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number: 10A3
Signing time: Tue 17 Jun 2025 05:00:55 +0000
Manifest this update: Tue 17 Jun 2025 05:00:55 +0000
Manifest next update: Wed 18 Jun 2025 05:00:55 +0000
Files and hashes: 1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: CSZoC4zH9ctBstL9axfR/JbtbTPyrym16Ghbf28E/lI=)
2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:43:01:25:cf:d3:82:e5:3f:f2:59:97:eb:3c:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Validity
Not Before: Jun 17 05:00:55 2025 GMT
Not After : Jun 18 05:00:55 2025 GMT
Subject: CN=01b4f64c8de494cb6394b6a49765eb79bb728d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:a1:07:e2:7d:a7:1e:72:fd:30:d8:53:2a:
9e:9b:44:41:2d:b3:0e:66:10:4e:72:0a:ef:d4:b7:
54:20:a4:b8:ff:15:87:77:c0:f9:81:56:59:f4:17:
76:88:41:f3:70:83:e7:f5:dc:4c:1c:86:2d:61:0c:
47:78:8b:8e:96:f4:95:de:47:56:1f:8b:89:98:14:
a8:28:34:20:b7:66:d2:90:55:ef:83:93:8d:e4:c6:
02:62:07:6e:19:01:af:a4:e6:c9:95:14:d5:70:a0:
d8:03:db:1d:c0:1b:7d:25:b1:10:76:27:af:f0:cd:
0e:38:a6:73:9b:55:dc:ee:30:eb:85:8c:7a:50:65:
c5:f3:d8:a1:2c:62:e2:b7:f3:f2:14:ab:f9:a2:ce:
50:0c:87:36:08:d3:c1:b3:a9:12:bc:66:5b:c4:16:
6e:16:29:e0:7b:18:a8:04:76:8b:44:6d:af:c9:52:
48:21:54:60:d6:62:ae:45:c2:82:c3:e0:31:76:73:
a9:d9:79:f4:37:a7:0f:bb:e8:42:00:a3:ab:4c:23:
46:59:c2:60:11:29:f8:ba:fc:89:1d:15:a7:f8:ea:
2b:4a:96:6a:5b:a9:99:a8:07:ab:16:b3:b3:fc:8b:
f1:84:f7:24:c4:f2:a4:6a:81:a2:5d:db:99:c5:f4:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:F6:4C:8D:E4:94:CB:63:94:B6:A4:97:65:EB:79:BB:72:8D:1F
X509v3 Authority Key Identifier:
keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:bc:f8:80:d2:40:b0:c1:fb:ca:4b:c3:2a:8b:f9:38:f6:
fc:49:3b:af:75:d0:4e:c9:3a:f6:30:43:a7:70:67:16:0c:8a:
a3:68:28:e8:0c:42:d2:f8:be:3b:97:30:b8:dc:34:2b:49:81:
2a:83:1d:91:04:88:e0:3f:4d:e3:fa:dd:6f:26:cc:6c:08:fe:
00:c3:bb:a0:ab:96:47:6f:b0:58:72:61:44:46:6b:a2:d4:21:
05:74:e2:4c:52:04:c4:96:21:1b:02:58:a7:43:c6:5c:d4:e4:
a3:48:b4:b8:d9:a5:6f:a6:0d:60:41:8f:e2:15:9d:5b:44:af:
9d:f4:b5:46:11:a3:14:30:7a:a1:c0:02:49:0e:f5:f3:50:ef:
5f:0c:07:66:72:57:3c:33:09:7b:1c:de:14:5f:62:34:3d:35:
0c:44:4d:28:ee:10:a7:67:89:b5:ce:af:e4:f1:4d:f6:4e:14:
0a:e5:66:62:3f:61:f0:12:d1:d2:49:1d:86:ee:e3:a2:bd:13:
b1:61:cf:f8:6c:f9:11:a7:b8:46:82:be:05:fc:67:71:36:19:
6f:32:aa:43:7a:4d:fd:76:42:b4:d3:95:4a:b1:f2:26:5d:de:
53:b6:ec:4c:95:2c:ca:d6:a1:46:e8:64:08:79:92:9b:2a:b5:
ba:8a:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:54 2025 by rpki-client