Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: u8vAfrFvHZZrGLHC/wigLpmX5mgcUVsSeiDmUSydpHU=
Subject key identifier: ED:16:2C:76:12:7A:C5:FA:B8:6C:4B:8C:BB:BC:F5:A5:12:C6:4C:D0
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 0197684E1130D37D23B74DD4FFA9FE450F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0CAA
Signing time: Fri 13 Jun 2025 08:00:35 +0000
Manifest this update: Fri 13 Jun 2025 08:00:35 +0000
Manifest next update: Sat 14 Jun 2025 08:00:35 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: ocA1hjEfP43r4O65JWCvbSefZlT4mG0eTIvRsqUyXGA=)
2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:11:30:d3:7d:23:b7:4d:d4:ff:a9:fe:45:0f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Jun 13 08:00:35 2025 GMT
Not After : Jun 14 08:00:35 2025 GMT
Subject: CN=ed162c76127ac5fab86c4b8cbbbcf5a512c64cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:fe:35:d1:b5:af:19:34:dd:9f:17:3e:9a:
78:61:29:b5:16:ee:c8:9e:c8:d9:fa:e6:22:3a:c9:
e1:be:0c:b1:b1:9f:f1:60:7f:b7:c6:3f:85:29:e0:
58:53:43:97:19:f9:80:ec:f2:69:10:f2:88:cb:0f:
08:0c:30:85:8c:03:6b:15:04:1b:d7:f6:9e:a0:fa:
ac:e5:80:b2:00:fb:12:1c:cd:51:96:31:c2:5d:05:
56:b7:5f:be:d4:ad:4b:b5:57:74:ab:c9:fe:62:e9:
37:06:24:88:e2:1d:da:9e:f8:fe:9f:06:70:a9:a8:
58:81:3e:a4:7f:3e:38:50:44:c6:de:7f:f2:a5:df:
23:9b:d6:2f:b5:35:94:0d:70:e0:b4:e7:e4:a8:79:
09:7e:d3:98:ee:85:b4:b8:5c:0e:59:08:6c:9e:28:
b7:c9:c5:dc:e0:1e:d6:ab:a5:fb:e2:d4:7b:d0:c6:
e0:02:49:c9:94:77:43:b0:42:49:d1:e3:e5:70:a3:
c8:24:39:f7:1b:f3:c9:7c:4a:a8:ec:7e:ef:91:c8:
d9:91:2e:2c:a5:7a:da:fd:60:ec:2f:ba:51:10:38:
cd:5a:fe:a3:ad:49:92:02:d6:59:2f:cf:4d:b6:77:
0d:b8:3c:72:d2:d9:85:3d:34:1e:64:c2:53:27:6b:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:2C:76:12:7A:C5:FA:B8:6C:4B:8C:BB:BC:F5:A5:12:C6:4C:D0
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:c2:af:48:94:3e:65:14:ed:98:10:b5:63:45:3a:80:90:
b1:b9:0d:6d:3c:ce:95:41:65:21:84:6a:83:fe:b3:8c:bf:7d:
37:10:74:8c:6d:74:00:45:76:1f:2e:12:11:02:f6:46:5d:7e:
97:fa:9f:6b:3f:93:91:0d:1c:ff:9d:20:a6:c1:38:93:ba:0b:
8e:62:de:d5:f5:5e:c5:98:a3:35:fa:42:16:d9:6e:e2:a4:f8:
12:e3:f8:df:9e:a9:f7:df:f4:3f:3d:26:9e:a1:e6:0f:5e:2d:
99:f6:e4:29:b8:87:55:f3:36:ec:8e:74:c0:13:4a:08:9b:ef:
85:8f:19:6e:33:98:71:14:e3:e8:0c:db:ce:2a:2d:e0:a0:cb:
41:03:44:70:d6:c2:77:1c:0d:fb:f2:41:cd:9b:99:52:4e:2f:
09:ec:fe:1e:2f:c7:17:c0:94:04:c8:f9:76:5c:af:5b:2b:5e:
70:1e:53:06:7c:1c:47:1c:04:55:f0:a9:2e:f2:26:05:30:d7:
62:a5:f3:22:96:b8:0d:e7:20:70:4e:ef:98:c6:d7:15:7e:57:
a4:e5:b4:64:9d:c0:1b:f1:66:52:98:6e:6e:ee:84:bd:94:55:
a5:4b:39:8e:b7:ee:b3:bc:d8:9a:20:c9:4b:65:fe:4b:e5:27:
fa:58:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:27 2025 by rpki-client