Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: My/HqUhz9+l25wC1YeBkYezZMIlZQMjRLfOdL2L2oUM=
Subject key identifier: C6:28:6D:EF:FB:15:72:DD:64:F0:72:4A:E7:AC:43:5D:47:D6:A5:70
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0197752DD062A86D89280267BDBA34557106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1023
Signing time: Sun 15 Jun 2025 20:00:26 +0000
Manifest this update: Sun 15 Jun 2025 20:00:26 +0000
Manifest next update: Mon 16 Jun 2025 20:00:26 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: dF69AZMcnbXmJNQ9wqE4lwXizhb/nofi/sEV+c5n58Y=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:d0:62:a8:6d:89:28:02:67:bd:ba:34:55:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jun 15 20:00:26 2025 GMT
Not After : Jun 16 20:00:26 2025 GMT
Subject: CN=c6286deffb1572dd64f0724ae7ac435d47d6a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:fd:03:30:2e:d8:8d:f3:3a:76:8e:ab:72:
00:60:c3:96:1b:ed:ff:57:d7:5f:4b:95:79:6d:4c:
91:4b:1b:ab:12:60:ec:dd:0b:7c:fd:c0:b2:36:17:
05:00:a2:5d:d9:1c:47:92:94:73:92:9b:b2:64:42:
d2:76:da:9e:b3:50:c5:9a:bb:ab:2c:73:04:27:c1:
d7:37:14:a8:52:a7:df:8a:ca:3c:c9:01:6a:6b:9e:
58:22:8f:78:e3:2a:11:27:09:61:16:09:24:09:51:
8b:86:38:7a:1d:a8:d2:02:15:61:32:98:a1:e0:b1:
b7:44:bf:82:b4:13:19:95:cc:63:6a:a8:fd:6e:c2:
4a:9b:5c:a8:38:aa:66:25:88:a2:bb:b9:89:ff:06:
39:20:66:fa:9d:c6:9a:36:08:39:2d:50:08:c4:cc:
1f:6b:91:75:f1:b9:5e:e2:c2:8d:1d:4f:10:e5:76:
f7:3d:ad:ab:a4:f1:9d:b0:0a:7a:92:42:89:0e:f8:
b1:11:23:6f:66:04:11:eb:a2:93:70:d9:f8:22:4f:
80:ea:9f:44:f9:db:07:88:22:f3:50:a4:5b:76:37:
7b:2c:9f:c7:de:db:8b:7e:b4:9c:a7:e1:de:7b:d4:
58:32:68:10:92:5d:81:e2:7b:83:2a:11:2f:8d:14:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:6D:EF:FB:15:72:DD:64:F0:72:4A:E7:AC:43:5D:47:D6:A5:70
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7a:24:e9:ef:2f:e2:4a:9a:45:e1:32:15:1c:38:6d:a0:69:
df:cb:a2:97:a9:7a:06:39:a8:f1:dc:1d:d1:d5:77:d9:03:af:
f8:e0:f2:0a:23:70:db:54:7e:a2:75:06:49:90:74:bc:8a:ae:
0c:80:f7:22:58:65:11:02:e5:84:6a:b0:16:41:e7:bb:a6:09:
b7:ac:19:b3:ad:34:1f:b1:84:09:a4:1f:f7:53:cb:47:f9:1c:
d1:c8:aa:48:33:98:fb:90:d3:6f:8f:24:a9:88:42:84:78:44:
f3:b9:c9:ce:7b:d8:1f:f6:8e:04:39:fd:1c:f8:24:f5:9b:7b:
99:89:6f:e4:a5:78:e5:c5:28:93:38:a7:37:45:a0:98:4c:e4:
21:7d:97:6b:1b:11:3d:a0:10:36:d1:91:f8:2d:2f:7f:8b:e6:
a0:dc:b1:5c:f5:90:23:68:ad:d9:b0:93:84:7d:10:d4:72:64:
5a:6c:44:ee:a7:f1:36:23:60:98:dc:43:99:84:13:10:09:08:
36:c8:cf:e0:ac:5c:c5:45:a8:81:f3:0c:48:73:14:c0:9c:c3:
ba:9f:53:37:c3:f2:36:34:3d:d9:07:32:79:f2:36:b5:61:05:
b7:ff:ae:89:c8:a8:f9:58:4a:d2:6a:e9:6f:44:94:4b:aa:80:
87:9f:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:47:07 2025 by rpki-client