Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: CNoG0UrAFttGgucYoK18d/S+Tsby3q03P0pH6hncn0Q=
Subject key identifier: 4E:CE:5A:E7:FC:11:A0:01:E0:54:65:18:35:68:20:BF:10:26:2E:4D
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 01976C2AA31495C0D9F179AEA23B8726EF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 12A8
Signing time: Sat 14 Jun 2025 02:00:22 +0000
Manifest this update: Sat 14 Jun 2025 02:00:22 +0000
Manifest next update: Sun 15 Jun 2025 02:00:22 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: a657JdVEtGJzTE8QjsdcbXnMzl8loNsiQe6PgHNBBBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a3:14:95:c0:d9:f1:79:ae:a2:3b:87:26:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jun 14 02:00:22 2025 GMT
Not After : Jun 15 02:00:22 2025 GMT
Subject: CN=4ece5ae7fc11a001e0546518356820bf10262e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:13:ea:b1:51:2e:70:c0:93:dd:1b:72:26:b1:
50:35:dd:2c:e4:c2:67:52:d6:8e:a6:c1:92:af:29:
bf:1a:65:fa:a3:3c:58:01:66:5d:6b:0c:24:0a:4d:
3f:b2:ba:0b:ac:78:e4:66:ac:41:33:82:bf:b7:02:
52:b4:79:84:79:19:5a:20:57:c3:39:a9:7d:8a:11:
b5:2b:60:37:a0:db:5d:8d:f4:c4:c8:ce:8d:d6:2a:
1a:fe:be:eb:ee:18:36:cc:97:52:85:68:15:d0:fa:
ca:f5:00:35:b6:55:63:df:77:0b:1d:67:25:93:9b:
05:ed:2a:9a:f1:00:56:26:16:5b:05:0e:ec:cf:e8:
18:2c:ca:56:df:d4:ee:28:18:b1:3d:ad:a4:02:ab:
7b:2c:72:97:f2:ff:29:dd:15:7c:cb:a6:bc:59:c7:
bb:7a:38:57:cc:fc:3f:df:4e:22:48:d9:ed:58:26:
8f:59:de:1d:6c:15:ad:14:13:fe:d6:31:7d:87:70:
08:27:32:4e:ed:11:c2:35:a3:1e:3e:a8:20:ba:53:
60:99:c9:7e:fe:6e:72:de:50:5d:0e:f9:78:14:d0:
6c:6f:83:5d:b8:8e:af:43:31:fa:a3:e9:ac:1a:ae:
e4:53:37:b0:65:73:3d:a8:01:1d:30:c8:5e:f1:d3:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:5A:E7:FC:11:A0:01:E0:54:65:18:35:68:20:BF:10:26:2E:4D
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:51:40:20:4d:c5:45:9e:fa:7e:de:f8:9e:40:64:67:02:
67:b1:8f:9c:58:05:66:93:85:97:39:74:6f:1c:53:4c:c9:ad:
ea:9b:5a:96:90:16:80:76:f9:5f:72:79:af:75:02:83:af:2e:
b0:5c:c9:41:8f:a6:28:d9:44:8b:7d:a2:c0:a2:fe:bb:95:6d:
85:7f:23:9f:e8:4d:96:69:2f:39:a2:75:7c:a1:8a:2d:bf:37:
77:db:f9:f7:ee:11:d5:df:05:a1:a6:6a:df:25:70:11:33:e2:
0f:eb:e8:2b:80:53:56:fa:22:fa:d1:33:69:d1:61:aa:8b:bb:
5b:dd:64:6b:dd:c3:88:d1:f5:5c:b5:74:40:2a:67:87:77:b2:
d7:97:36:02:c4:43:39:b0:1d:dc:be:f4:67:ae:e0:1c:5b:6e:
a3:55:40:09:be:2b:45:be:51:03:19:a1:43:f3:4f:d5:ef:5b:
a5:8a:56:b0:ae:7e:f4:26:e3:e6:af:39:00:48:9e:c6:50:76:
fb:71:44:92:be:77:66:47:8f:16:bb:1b:be:30:40:35:50:ae:
3c:c9:ac:59:ab:1c:11:0b:7d:47:2c:85:01:60:93:0e:f7:3c:
f5:6a:ff:b0:51:4d:a1:5c:3b:d6:ad:19:30:f6:7e:92:44:e8:
e0:0c:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:34 2025 by rpki-client