Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: oJZM3AN3lV9aTGxoQgVEas+obv5hrwlRowyf6UiXZRs=
Subject key identifier: 41:0D:10:C1:18:1D:90:7E:55:2B:F9:9B:0A:C0:99:8A:95:75:98:BB
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 01976F2C0F88C61B3B929F3128FB93C6092E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:00:47 +0000
Manifest this update: Sat 14 Jun 2025 16:00:47 +0000
Manifest next update: Sun 15 Jun 2025 16:00:47 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: OYf49BevXZDQLPSGCuvBDo6HYqWQkOjQQXrin2YzVr4=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:0f:88:c6:1b:3b:92:9f:31:28:fb:93:c6:09:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jun 14 16:00:47 2025 GMT
Not After : Jun 15 16:00:47 2025 GMT
Subject: CN=410d10c1181d907e552bf99b0ac0998a957598bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:43:f5:a1:c0:d9:d8:f0:ac:69:09:d1:5b:
16:02:47:4f:34:54:1b:06:14:ff:36:9e:b1:0d:e2:
69:ab:b2:86:84:9f:f9:99:d6:14:0b:29:51:d6:6a:
bb:1b:02:b2:e1:52:00:e6:d7:3e:8c:fd:7b:ba:81:
58:c7:cf:c0:8e:1b:07:c1:d1:9e:be:8d:3e:82:d6:
c5:70:99:79:80:40:31:69:43:95:ab:11:c3:ad:f7:
8b:f7:2d:80:5d:c5:d8:56:9f:df:c4:5f:28:dd:fd:
4d:d1:bd:e9:48:91:e1:b3:a2:60:e9:91:7b:82:9d:
a6:2f:c4:5c:0b:16:ec:f7:ce:4d:65:1b:0a:c5:f2:
e7:f7:d5:20:f6:06:4c:74:b6:d8:f8:76:f3:d3:d5:
d0:ad:69:ac:d2:8c:80:5b:a6:2e:e6:c8:fc:c9:7e:
70:10:2a:7c:24:14:fb:94:e6:55:c6:b1:c0:cf:a9:
b3:85:03:9b:20:e8:53:e1:38:e2:04:44:27:9d:8c:
75:b6:20:77:bb:74:21:86:eb:35:fc:4a:a3:1f:f8:
e2:37:a2:24:d5:a9:19:be:e6:c0:15:3b:9d:9c:15:
42:f6:29:ea:d4:fb:3e:b0:1f:e0:98:d1:cc:ac:10:
25:94:de:c8:fc:22:57:33:35:11:e5:20:f8:ae:e8:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0D:10:C1:18:1D:90:7E:55:2B:F9:9B:0A:C0:99:8A:95:75:98:BB
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:14:6c:13:87:a7:eb:d0:5c:e9:00:cf:19:95:53:d3:e0:
68:f3:d7:a2:20:79:69:6a:7b:7c:02:74:57:cb:ad:2b:9b:d2:
a6:e9:92:ee:be:c7:e6:37:f4:8f:1e:0e:24:b8:fe:5a:7a:ce:
f7:da:74:f0:1c:09:cf:67:17:a5:37:be:14:03:ba:d1:30:8a:
bf:93:be:52:2c:1a:59:51:03:7e:91:30:ac:85:ab:05:36:95:
cf:ea:78:03:88:fa:2c:11:70:3a:4b:3c:77:79:0e:b3:ce:4b:
3b:b0:b5:38:b9:fb:b2:a1:36:de:64:13:b5:04:93:85:79:ff:
10:36:c6:8b:b5:17:c9:d5:ff:88:b9:9f:34:19:6b:77:33:f7:
a9:2c:40:46:41:04:e8:06:2d:a6:9e:80:68:59:c0:fb:aa:6f:
b1:c2:18:e8:d6:67:b9:2e:fe:fa:94:db:f2:67:49:4c:49:ae:
18:89:4f:14:98:35:fd:db:0c:e6:3c:12:79:96:f1:32:12:50:
e7:40:e8:d2:de:99:37:37:63:9a:11:78:00:a4:cd:62:80:e7:
f8:0e:09:52:cd:53:9a:36:d6:17:a0:a9:a2:b5:d0:0a:57:80:
9a:94:b0:21:0c:7d:c0:9e:6a:44:9d:a0:ba:69:b7:ed:2f:55:
6d:5e:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:32 2025 by rpki-client