Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: 3zdmn7f9190oZ6IDrUtxDyYFBecxzKokXfa1LP4zetw=
Subject key identifier: EE:6C:91:7B:AC:92:30:25:1A:F7:09:C1:5E:46:FD:96:15:3E:F2:23
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 019777F811B0DE965121BD56DF85278DF4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 131D
Signing time: Mon 16 Jun 2025 09:00:35 +0000
Manifest this update: Mon 16 Jun 2025 09:00:35 +0000
Manifest next update: Tue 17 Jun 2025 09:00:35 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: vUDfrRD14r3cPp8HQwKVUbTfWrKzAQq7RKzCyf8cUKg=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:11:b0:de:96:51:21:bd:56:df:85:27:8d:f4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jun 16 09:00:35 2025 GMT
Not After : Jun 17 09:00:35 2025 GMT
Subject: CN=ee6c917bac9230251af709c15e46fd96153ef223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:aa:40:ad:14:76:b4:bc:28:2d:e4:b4:45:
cb:82:a2:1b:bd:2c:20:f7:48:49:c7:e8:7e:3e:69:
9a:59:42:47:80:07:55:d3:c9:08:73:47:05:05:a7:
89:bd:92:b8:7e:e5:72:ae:4c:1c:ff:2d:5d:e8:53:
d6:51:d9:80:32:2e:74:e5:be:ac:f5:60:cf:0d:79:
a8:03:09:e5:f9:1f:2d:0c:e2:46:6c:a0:8c:b8:39:
f3:78:6c:0c:fb:b5:ff:80:b8:76:90:f8:f7:0a:7b:
e7:b9:46:10:93:99:b5:34:50:b3:3b:33:c1:09:6f:
07:93:07:7e:d1:40:48:d6:c9:07:75:f8:c0:db:26:
4d:89:76:92:6a:82:f5:dd:ce:db:3b:f0:75:19:b6:
e5:b0:e5:84:dd:93:77:66:bf:59:81:49:7d:3d:b1:
2f:6d:e7:ec:00:38:e4:a0:f3:d9:00:ea:bf:30:57:
70:24:f3:f0:01:66:9c:21:b1:35:08:d3:86:05:f6:
be:93:37:c2:c3:c3:c5:cf:2c:8d:0b:c5:bc:18:99:
67:28:de:ee:fb:04:b3:9a:c1:8e:71:58:e1:a0:f3:
3d:bf:2c:6a:fe:55:87:6f:df:c1:e8:40:5c:cd:fd:
9a:fa:8a:e9:fe:89:0e:7a:fe:e3:7a:c5:21:d8:43:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:91:7B:AC:92:30:25:1A:F7:09:C1:5E:46:FD:96:15:3E:F2:23
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:1e:21:48:71:83:cc:bb:3f:c2:fe:d7:a5:38:2a:48:fa:
19:a4:ef:41:d2:b7:fa:78:65:e1:e1:6e:0f:04:63:f4:32:27:
c1:8d:54:36:77:04:ab:b4:0e:c1:cc:01:24:82:9b:6b:ba:32:
ce:ef:cf:42:f9:a5:4e:10:4c:99:4f:6e:9b:ca:ae:26:e8:c6:
63:d0:0f:9c:1f:f3:6e:6d:30:da:79:74:c6:88:f8:15:1d:9a:
fd:48:84:fd:d7:2f:74:94:9d:56:5d:5d:a4:b6:32:d5:e2:94:
ed:f8:7b:da:77:52:c6:b0:5c:eb:7b:4f:2c:e0:88:b8:6c:dc:
28:7b:22:98:95:4e:87:99:4d:dc:8d:98:12:6f:54:93:72:39:
d6:c1:8b:51:f4:98:df:c4:f9:a2:a3:c7:5d:0f:0b:eb:ab:3e:
86:82:6d:8e:a3:82:97:8c:16:25:7a:ab:44:a4:db:c6:c6:4e:
ab:a5:fd:b6:9b:30:1f:7d:22:f0:28:c8:94:3e:e9:e0:aa:49:
a0:d2:c4:b6:15:0d:3c:41:2a:94:eb:73:6b:e3:ed:32:78:62:
ce:be:d9:5e:98:ae:6c:d3:36:f2:3f:55:89:6b:6e:f4:b9:e6:
1f:d3:62:88:27:b1:82:64:27:c6:47:85:a0:64:a3:1a:96:3d:
27:b8:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:49 2025 by rpki-client