Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: c+cjcAoZilzl1CkPH9Wa4l8rgd4yb4BcDIxHPRUCOpo=
Subject key identifier: 1E:23:83:44:F6:54:09:6D:7C:61:85:86:8A:9B:6E:C4:C1:E9:42:37
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019769978BEA46F1B3F1211C5016FD5DFA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 13B9
Signing time: Fri 13 Jun 2025 14:00:28 +0000
Manifest this update: Fri 13 Jun 2025 14:00:28 +0000
Manifest next update: Sat 14 Jun 2025 14:00:28 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: EpCGCNiny+9u2VVgRhPwXpaQLKy80eNpLQa2zPJlZgk=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:8b:ea:46:f1:b3:f1:21:1c:50:16:fd:5d:fa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jun 13 14:00:28 2025 GMT
Not After : Jun 14 14:00:28 2025 GMT
Subject: CN=1e238344f654096d7c6185868a9b6ec4c1e94237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:72:9c:29:8e:cf:b8:cd:ab:35:23:4c:97:
f5:15:cc:a0:42:61:9c:e0:fe:3c:67:ac:ae:9f:01:
9b:68:3a:0e:ed:9a:aa:50:fd:88:3e:f4:db:82:78:
31:e4:37:c9:ee:80:1a:1a:59:80:67:db:0a:f7:b6:
f8:c8:fc:bc:2a:cd:82:c6:e2:3d:8b:fa:76:86:da:
0b:46:eb:c7:8d:d4:5d:fe:0e:5f:99:f7:aa:30:ac:
55:e4:c8:52:11:a8:c9:08:ca:f6:26:e2:e3:9f:b5:
77:d6:55:70:52:86:2a:f8:65:d3:4c:67:a9:fa:53:
8e:db:80:a8:9f:e0:f2:27:e8:4c:35:c7:77:63:8a:
76:3c:2d:ff:fd:29:b7:c0:ad:99:ac:66:e4:a4:2d:
dd:bd:5e:68:14:99:7f:cf:b0:1a:82:aa:0e:67:f3:
36:dc:63:2b:9e:f7:1f:fb:c5:bc:92:9b:86:fd:1c:
b7:ce:59:4e:32:6c:39:cb:54:30:90:9b:07:e2:c3:
72:46:80:bb:45:6c:0d:c1:d4:ae:40:d9:14:3d:46:
39:4d:41:1d:b4:34:62:98:8d:83:d9:6e:7d:4c:09:
ab:48:f7:1e:be:58:bd:0e:30:72:18:47:74:87:f2:
fa:b0:03:17:69:d5:53:78:c7:5d:d7:6e:6c:7d:52:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:83:44:F6:54:09:6D:7C:61:85:86:8A:9B:6E:C4:C1:E9:42:37
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:03:a5:fa:ec:7c:62:2e:07:92:cb:69:36:8c:a5:dd:a4:
87:31:ea:c7:3a:b6:d5:28:22:68:e4:ff:26:0d:1e:d0:b4:c0:
2a:5b:b6:20:dd:f5:2f:83:a6:7f:c5:a6:31:cf:50:3c:be:82:
bb:51:63:50:93:32:50:b5:62:ff:53:c3:57:3e:2d:be:c5:e7:
0c:bd:b3:c9:e3:68:42:10:21:30:ee:5e:5b:f4:0f:0c:1a:86:
67:62:e0:d4:21:93:ff:62:7e:54:df:d7:b0:75:02:c7:04:76:
65:33:1b:36:02:11:12:3a:a2:16:01:ee:ca:40:5c:c7:8c:00:
73:b4:04:99:a4:e7:68:9e:45:75:4e:f6:19:55:ef:1f:2f:d6:
dd:7e:b3:c7:7f:74:59:08:34:87:84:00:f6:4d:cd:a4:25:6a:
49:c1:66:36:d3:d8:2d:fd:0f:e8:28:d2:36:3b:86:e8:80:35:
d7:de:24:b3:94:7d:0a:37:3f:64:5e:3a:d2:10:71:15:2d:1e:
ac:ac:d3:88:65:54:5a:13:54:ee:14:8f:f0:5d:e8:73:ab:85:
7f:77:27:c6:e8:af:f3:97:2d:02:63:e6:a7:6d:02:ec:3e:b9:
ac:cb:70:43:ca:c4:78:d9:7f:a1:d4:8e:a5:e8:26:24:01:20:
13:40:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:25 2025 by rpki-client