Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: TDsn7POr/ftGOCfzs5NbDfB4+HZUPtyEQa/aGrrWoLQ=
Subject key identifier: CE:0D:1B:B0:DB:C8:73:B8:FB:7B:27:B8:97:E5:80:51:F3:14:61:9B
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01976C61E8DA7BEC37FA5C79DB1762DB1F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 03:00:45 +0000
Manifest this update: Sat 14 Jun 2025 03:00:45 +0000
Manifest next update: Sun 15 Jun 2025 03:00:45 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: tZI2RiwCWJnGn5VStwrnlSr807KOWa/eoZQRUaw1PQo=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e8:da:7b:ec:37:fa:5c:79:db:17:62:db:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jun 14 03:00:45 2025 GMT
Not After : Jun 15 03:00:45 2025 GMT
Subject: CN=ce0d1bb0dbc873b8fb7b27b897e58051f314619b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:81:69:aa:a3:bb:be:64:3e:07:66:f0:db:
bb:be:03:88:dc:92:e0:7d:b0:41:3a:be:1a:46:88:
b1:6e:0a:3f:8e:de:21:75:c2:73:9a:e6:52:66:1b:
3f:7e:90:ea:61:0c:fc:84:42:75:6a:7f:17:7c:da:
05:37:07:06:3f:10:cf:3d:ec:9d:5f:fd:8f:25:87:
8a:bb:85:65:68:0e:e0:06:02:ba:cd:c6:a2:65:8a:
58:14:c0:e3:b2:4f:6d:ca:7c:7b:fd:fa:f8:08:c4:
b7:0b:ef:8a:2d:47:ac:23:55:0f:44:7d:04:15:93:
0e:54:71:09:05:78:da:77:45:0d:a6:7a:bb:f8:48:
b1:e6:30:1a:59:ed:d6:22:49:e4:15:be:6a:34:77:
10:e0:9d:f0:65:9f:c0:7a:42:ec:69:44:96:96:a4:
df:79:67:97:33:97:3d:1e:b6:10:27:c5:98:2c:28:
6c:90:c5:16:57:96:b9:22:63:00:8e:5f:c3:5a:a5:
e3:c1:fe:ab:bf:56:f8:da:97:37:f5:fa:cc:fa:12:
e3:9c:b6:b8:9c:0f:c0:03:dc:6a:11:54:68:79:c3:
38:94:56:25:77:2b:fc:32:1c:16:09:d8:d5:f9:9d:
f9:c2:17:08:c7:ac:f8:d3:75:53:69:b2:d7:b6:5d:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:1B:B0:DB:C8:73:B8:FB:7B:27:B8:97:E5:80:51:F3:14:61:9B
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:03:52:c9:f8:d2:6b:01:2e:30:b1:13:30:14:bd:81:d9:
23:c8:df:4e:07:06:ff:ce:a9:fc:0b:bb:db:f9:cd:c7:02:d6:
dd:84:c7:ef:be:ab:30:71:48:ca:6f:a1:8b:75:1e:62:0d:a3:
e2:46:ac:f2:26:93:52:f0:4a:1a:cc:8f:97:1c:e2:5a:5d:e1:
32:2a:93:26:6c:73:74:93:b4:9f:7a:b5:ff:6f:c4:39:bc:41:
fb:fa:a3:68:94:44:62:e9:3c:3d:ec:cd:41:bf:5f:8d:95:61:
d5:f2:f0:ac:05:99:df:29:4f:b2:6f:7a:9d:92:01:ac:90:7d:
56:f8:08:36:74:f3:ae:8c:34:5b:fa:fc:e5:34:5f:5f:65:3b:
d2:3d:3a:28:61:d4:0f:02:52:a8:57:a0:51:3d:a0:54:21:58:
e9:52:f8:cc:3d:7c:d9:93:78:ac:3b:91:bd:36:4e:c2:68:bb:
23:ee:1c:42:a6:b0:d8:99:2e:88:85:60:3c:88:fc:d1:4c:6a:
3f:68:82:69:7a:da:12:6d:15:68:0d:08:d6:67:c4:5b:6b:c3:
f4:89:d9:11:3c:f9:51:de:b5:00:8d:25:9d:0b:0e:47:28:64:
bb:0e:2a:98:f5:c6:29:54:81:78:d1:c9:f7:a9:c2:fd:a2:c0:
95:a8:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:43 2025 by rpki-client