Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: iNdlubMb+llwGDPG81ZoGFw3XbzZXMvujZB7oKpCDp4=
Subject key identifier: 5D:B1:45:E9:3E:41:6A:E6:D2:1A:49:4A:30:E8:3A:CF:86:A1:97:7C
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01976BF41249DDB5433BDFF3007EF3A87C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1174
Signing time: Sat 14 Jun 2025 01:00:46 +0000
Manifest this update: Sat 14 Jun 2025 01:00:46 +0000
Manifest next update: Sun 15 Jun 2025 01:00:46 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: /6uMFZ/T9J6WqPFasBGBTTXan6KwrRQyiUgEbbvSCZc=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:12:49:dd:b5:43:3b:df:f3:00:7e:f3:a8:7c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jun 14 01:00:46 2025 GMT
Not After : Jun 15 01:00:46 2025 GMT
Subject: CN=5db145e93e416ae6d21a494a30e83acf86a1977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:ba:83:1c:94:36:4e:6d:6f:bd:9b:71:14:
83:f9:73:9d:d4:8b:51:21:3d:22:29:0d:6b:4f:05:
02:a7:32:66:eb:51:7a:7f:ec:0c:04:ab:5d:19:d1:
e7:73:4b:11:b6:1d:87:68:93:f4:1b:a1:d6:a9:db:
bc:12:00:6f:db:d2:33:09:de:10:e8:d6:b0:66:67:
6c:8d:50:30:2e:56:d5:ca:e3:82:67:d1:08:23:5a:
b5:9e:f4:f8:82:88:d1:e4:64:a5:1e:cd:a2:3e:16:
2f:8c:e0:9a:7c:f1:0b:01:2c:e2:df:8f:9e:b5:ba:
c9:55:e1:c9:02:5c:8d:2e:0e:ae:77:54:0a:82:32:
dc:9b:d1:01:3e:bd:ae:b4:49:88:3d:d7:7a:da:5f:
ea:93:ee:a1:2f:1c:52:56:bc:a7:63:af:45:69:a4:
d9:6d:2d:e5:3a:ac:56:31:20:76:e1:9d:42:86:a1:
8c:4d:cd:45:69:d6:6a:d9:ab:e0:0d:65:b1:cb:ef:
d9:43:4d:f7:d2:64:76:27:e6:72:8d:37:fc:38:da:
1b:08:5d:8c:82:73:cc:2b:41:52:2f:74:0a:78:3d:
d2:ab:1d:25:cb:c3:8f:d7:e4:c5:03:53:30:63:cc:
21:eb:f6:82:fb:46:c9:25:a5:53:68:6a:46:c7:fc:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:45:E9:3E:41:6A:E6:D2:1A:49:4A:30:E8:3A:CF:86:A1:97:7C
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ac:da:92:06:c1:d4:19:66:8b:d5:ea:81:b5:b3:97:f6:6f:
f7:63:51:50:89:40:9d:38:54:72:63:b8:ca:c6:33:69:08:af:
40:ea:fe:67:36:b2:0d:de:7d:a3:05:03:68:3a:6c:c8:ca:12:
99:59:62:4c:39:ac:67:d3:08:0b:45:b5:c2:84:b0:59:38:ab:
b0:77:a0:02:f4:8e:5c:90:7a:aa:0f:f1:bb:6b:6d:0a:e0:3f:
30:e5:51:04:80:8a:89:19:a3:1b:82:69:f0:53:7f:2b:4a:91:
79:f5:8b:db:8f:53:6c:00:36:f4:88:47:14:3a:03:7a:67:77:
a0:22:bf:09:cd:ed:19:28:25:8a:e7:0e:35:ae:bf:b4:9b:8c:
b0:14:ea:51:8a:73:bd:c4:26:78:85:d5:a4:77:b6:42:8f:46:
d7:81:da:48:dc:3d:3d:0c:4a:d7:58:43:db:1e:ca:99:76:49:
bc:7d:80:36:16:32:63:12:b3:d4:e0:00:84:79:4d:2b:63:77:
4b:f5:40:90:ad:49:34:5e:86:a6:35:ad:c8:75:b0:eb:9e:23:
0f:45:10:3a:f9:8a:79:b7:ca:e9:88:2f:47:50:af:ac:18:8b:
84:4b:5c:b7:86:be:b3:4b:7b:bf:c3:d4:b7:c1:7d:e0:8e:ca:
81:e8:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:16 2025 by rpki-client