Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: 5ZE1lVitYPNM3vBbJnWO/76cfXLq77CvX3FSDZzdcjQ=
Subject key identifier: 93:9C:3F:5D:54:B3:92:58:94:1D:A3:B7:1A:D1:9A:0A:CE:FC:E3:93
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01976EF5486B3DCEEF5D5483A1038FF0AD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0C4B
Signing time: Sat 14 Jun 2025 15:00:57 +0000
Manifest this update: Sat 14 Jun 2025 15:00:57 +0000
Manifest next update: Sun 15 Jun 2025 15:00:57 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: HgICtTI4vfWey5Po/e1Yw0tT1oCJbxohQ7DGxvzzVgs=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:48:6b:3d:ce:ef:5d:54:83:a1:03:8f:f0:ad:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jun 14 15:00:57 2025 GMT
Not After : Jun 15 15:00:57 2025 GMT
Subject: CN=939c3f5d54b39258941da3b71ad19a0acefce393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:96:5e:cb:c9:fe:f8:ef:98:6a:83:99:22:
fa:88:6c:af:f6:21:23:c2:3c:56:ac:b5:02:12:1f:
86:1a:da:ba:1c:66:94:43:56:84:b4:b6:8f:6a:81:
eb:28:bf:00:be:92:38:8b:19:17:f8:4f:61:88:81:
b9:73:87:cd:3c:8a:a4:8b:47:c4:2d:36:78:b9:f1:
2e:d5:18:59:d4:25:bb:dc:a3:f1:59:da:3f:c5:ca:
2b:65:f6:bd:bc:aa:80:2a:3b:90:53:84:10:dc:71:
de:8e:f2:b8:01:18:cf:65:0c:15:69:7e:ad:5e:db:
82:4f:6e:b2:1b:9d:92:ee:ce:73:7e:48:d5:93:ec:
76:52:e7:34:33:91:66:4a:c0:9e:15:2d:fa:3b:f9:
63:a9:c6:ff:7e:35:d8:fb:65:94:fd:5a:7e:a2:d9:
8c:15:3a:da:e4:28:94:4a:5e:ca:1e:02:a9:b0:0b:
ef:46:c4:af:fa:b4:e5:9f:21:0e:2b:db:01:de:1c:
35:3d:4c:3b:d7:34:6e:58:03:57:1a:f7:4c:3c:59:
c4:12:71:b5:7d:54:52:2e:57:19:99:10:cc:a1:57:
bb:70:74:15:66:bf:bd:68:5c:ad:7a:1c:99:3a:26:
71:08:da:b0:65:68:cc:0c:12:ba:67:0b:c0:27:4e:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:3F:5D:54:B3:92:58:94:1D:A3:B7:1A:D1:9A:0A:CE:FC:E3:93
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:bd:9b:31:03:b3:4d:d1:da:24:26:fe:2c:f9:df:1a:05:
5f:f1:87:42:62:02:93:ab:ce:c3:1d:43:6f:de:ef:0c:fe:e0:
b1:38:1a:ce:69:64:6e:a2:c1:0c:a3:38:b3:c6:a8:13:b6:5d:
11:a7:5e:a3:4f:cb:45:76:43:58:16:a1:6e:15:f2:34:27:32:
05:ad:96:fc:43:3e:a4:86:d1:36:24:4d:d0:27:22:92:fc:da:
b5:14:1d:3c:56:d7:19:0f:43:be:56:31:f8:c1:b4:e0:8a:8b:
f0:a9:d2:6d:96:38:c6:00:c3:98:6b:2e:bc:f5:97:7c:29:c7:
98:60:3a:5d:1a:e7:69:88:72:77:5f:b4:12:37:c6:73:cf:fa:
a5:e8:b3:97:0c:60:42:1e:8f:a8:fb:19:86:29:8d:65:05:a4:
16:f0:58:ba:5e:2f:9a:87:a4:b1:f4:3d:79:ce:10:d0:92:13:
dd:72:d1:0b:ff:5a:5a:32:39:9c:73:92:05:e7:5c:a3:a6:e5:
20:61:90:5b:2d:af:13:40:a5:3c:bd:53:f3:55:fe:aa:d2:51:
a3:5d:25:48:5a:ec:12:e5:19:d5:e6:f4:21:3f:e5:3e:25:b0:
cf:a7:b0:09:1b:6b:d3:b6:fd:5d:b1:7a:b7:fa:de:d0:ec:93:
3a:5f:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:08 2025 by rpki-client