Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File: 5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier: nNeoZiNTaN64SmW5RAiRlL6d5oJ9hewWDGkIEC0NgKQ=
Subject key identifier: AE:A2:BC:6A:28:19:59:05:2B:B6:E0:67:B9:31:D8:C2:49:FE:D8:78
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 01976D74602BF10A0D840702D3FF10E232CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number: 10EB
Signing time: Sat 14 Jun 2025 08:00:32 +0000
Manifest this update: Sat 14 Jun 2025 08:00:32 +0000
Manifest next update: Sun 15 Jun 2025 08:00:32 +0000
Files and hashes: 1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: nW4GQhesoPTXdEeRGEi/hjLo74375ysfV9KlHq7RpqY=)
2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:60:2b:f1:0a:0d:84:07:02:d3:ff:10:e2:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Jun 14 08:00:32 2025 GMT
Not After : Jun 15 08:00:32 2025 GMT
Subject: CN=aea2bc6a281959052bb6e067b931d8c249fed878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:ac:cc:07:5d:45:7b:f0:3c:2a:41:db:16:
da:64:e2:28:42:cf:bb:c2:cd:aa:f7:f9:e2:f0:dd:
e3:1a:3e:23:bc:9f:e7:b7:a0:91:d8:7c:2c:8b:48:
e7:3a:06:66:aa:81:05:a7:00:b3:df:45:73:20:ce:
70:59:10:ac:40:2e:ea:44:6b:54:ed:24:49:8a:83:
23:f7:24:c3:86:d3:13:13:0d:34:a0:40:d9:3f:f0:
14:f1:9b:50:7e:54:0b:a9:ef:63:a1:5c:85:91:88:
41:86:5a:d1:fb:0b:5e:db:2a:84:94:2c:e0:83:11:
38:23:e1:ef:80:d7:5f:6e:34:c2:2c:c4:5d:53:dd:
3a:a1:a8:c9:49:3c:37:75:bb:09:54:fd:08:8f:56:
c6:c1:39:5d:57:1c:95:4a:15:43:0f:2e:05:40:a1:
77:fb:6a:f0:5b:bd:51:24:89:bd:93:67:22:10:3d:
0b:dd:9b:96:e5:2d:76:40:f7:5d:8e:1b:2c:80:53:
43:81:10:bc:2c:7c:f2:3d:48:5e:f7:c3:c1:a7:75:
55:71:4e:9c:6e:d8:4d:dd:41:98:7c:06:2d:92:bb:
52:cc:e9:14:cd:1b:0c:93:71:a7:82:32:10:b4:1d:
4d:58:a6:e8:49:bb:39:2a:bf:75:39:0f:85:6f:fc:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:BC:6A:28:19:59:05:2B:B6:E0:67:B9:31:D8:C2:49:FE:D8:78
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:c1:8f:c1:75:c7:b0:e9:33:53:33:60:1d:71:69:c7:e3:
ad:7a:b7:04:9a:34:6a:52:87:69:37:12:56:e1:74:50:47:81:
49:4a:14:2c:e1:4a:e6:73:0f:f0:11:28:63:38:ee:e5:58:88:
ff:4a:d3:7d:9b:06:28:c2:ed:2c:58:4f:7d:2e:6c:81:7e:b7:
1c:9d:a9:03:06:3f:74:d4:41:4e:68:b2:ec:60:d7:5f:28:c2:
57:a6:c6:fa:0f:2d:7d:51:2c:79:aa:fc:12:15:75:16:2b:96:
25:b7:02:c7:83:67:76:18:b5:d4:9f:cc:e2:a8:39:9d:16:ba:
ae:b1:1d:c3:51:47:93:dd:49:10:a1:27:5b:d2:b5:1e:c3:58:
62:c6:26:4d:61:c4:95:54:ed:ba:8d:eb:49:77:c2:ac:61:e8:
0e:07:3b:18:06:f9:3e:12:15:12:89:c3:73:59:ed:29:73:79:
6e:ed:ec:55:61:cf:03:15:64:aa:13:59:f7:02:3e:5f:d1:ec:
66:d7:19:cf:c5:61:15:14:ec:1d:8f:ec:2a:25:61:ef:ff:8f:
e2:b4:73:57:b9:9d:47:68:e2:68:8f:5c:9e:0d:95:75:fe:35:
3c:b9:15:27:61:95:45:bc:47:0f:0a:4e:50:cf:e2:ec:66:c7:
01:f6:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:49 2025 by rpki-client