Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: nMV6MCxgWDLcWueOceSXfLuclrN1gg3gTlx6wEq9gyU=
Subject key identifier: FF:78:FA:8B:EA:7A:4B:2B:E6:92:32:95:EF:DE:A7:9B:F3:2F:00:B5
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 0197722CA67F1F6DED69FC0D6F285712B64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 01AC
Signing time: Sun 15 Jun 2025 06:00:18 +0000
Manifest this update: Sun 15 Jun 2025 06:00:18 +0000
Manifest next update: Mon 16 Jun 2025 06:00:18 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: bztJ9WjXK52sQSENgx6GKwBfX9S28gLDq7cw3mq9JHk=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: w3ygjB50ZRx92w3E54KyIR8KqJ8.roa (hash: cXhal8oweMGLldAVM2weLR4PJghtsshTj6l0MVxO5bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:a6:7f:1f:6d:ed:69:fc:0d:6f:28:57:12:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Jun 15 06:00:18 2025 GMT
Not After : Jun 16 06:00:18 2025 GMT
Subject: CN=ff78fa8bea7a4b2be6923295efdea79bf32f00b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:72:02:54:57:8f:18:42:de:ca:dc:89:29:
c0:b2:49:71:d5:40:d7:aa:9a:a8:fc:fa:9f:38:10:
8a:df:89:0c:12:c2:59:6e:cf:8b:f7:23:ce:29:78:
25:bb:4c:b0:b6:16:04:7e:a2:c0:3e:e7:d7:c8:9d:
53:94:a6:a7:33:eb:5f:15:65:dd:99:ae:70:d7:ef:
e2:ff:3e:3e:03:13:ec:59:56:46:91:99:41:a0:88:
3c:1c:99:f5:b1:11:aa:07:32:07:2b:8c:60:8c:d2:
66:83:49:9e:12:cc:33:ec:7d:c7:03:1e:c4:64:3e:
07:79:db:51:a6:35:12:86:bc:06:ac:96:06:e0:c8:
b0:de:6f:52:81:d1:75:26:84:4f:09:98:a1:72:25:
fa:f9:e0:0e:3c:81:9b:0c:54:64:e1:90:e7:22:09:
8c:d7:69:41:73:3c:27:d9:a5:87:bd:f8:0e:9e:dd:
47:d1:8a:4d:0e:31:8c:79:13:54:7a:42:3a:67:46:
88:c3:b2:9b:90:ae:2d:cc:0a:c9:eb:44:51:0e:5a:
8e:ff:c2:cf:66:cc:14:41:1e:35:74:cb:49:6a:22:
aa:60:6b:e5:b4:18:d0:86:a4:f3:06:73:90:9a:84:
82:ca:e2:de:d7:92:c7:55:24:74:da:df:48:ce:c3:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:FA:8B:EA:7A:4B:2B:E6:92:32:95:EF:DE:A7:9B:F3:2F:00:B5
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:6d:dc:14:75:59:34:b3:d3:c4:b6:12:8f:16:b6:31:c5:
c8:fb:af:83:7b:b7:a5:33:4d:53:e8:7b:6a:b3:27:70:d5:95:
93:34:b3:d4:bc:91:23:76:4d:ac:dd:1a:cc:a1:be:db:4c:45:
86:17:ae:4a:41:5d:2d:45:f9:ff:6f:04:23:a3:58:ef:5c:4f:
08:b3:dc:66:67:0b:95:36:b8:ea:33:63:1a:e3:bb:f1:89:d8:
84:38:72:f5:d9:c2:ab:bd:88:16:32:e9:7e:60:f6:53:33:eb:
6f:2f:51:1f:3a:1f:6e:f5:dc:ff:99:d2:a3:ea:b6:6c:36:7e:
4c:9c:5c:2f:e4:b2:1d:17:61:25:3a:b6:af:88:e7:d1:05:82:
f8:69:48:ee:97:60:77:a0:43:0f:d0:3c:67:d3:ec:4e:1c:f4:
57:97:f6:d4:e9:42:c8:7a:85:6b:cd:e2:87:27:8c:3f:6a:ed:
ad:82:1d:63:2f:03:04:78:46:9b:cb:cf:1b:5b:38:28:7d:e0:
49:ce:37:a3:d6:f0:5d:ba:88:25:7d:53:86:b5:d6:49:75:ed:
24:12:f3:66:b8:7d:82:47:ef:64:d5:a3:fb:80:ae:ed:d4:5f:
08:15:37:42:f9:75:27:5b:78:58:c9:df:12:e2:ac:4d:35:8b:
60:54:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:51 2025 by rpki-client