Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: CWEEyEaIdM/5SeOPk8+NfCcxGubtPXow27+Q+ui+SCI=
Subject key identifier: E5:BB:51:EF:58:55:50:92:63:BC:23:F7:77:6E:5E:A7:D3:2F:A8:2A
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 0197C5A5FEDD2E7363C3BAB6AF537AC71B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 1559
Signing time: Tue 01 Jul 2025 11:01:19 +0000
Manifest this update: Tue 01 Jul 2025 11:01:19 +0000
Manifest next update: Wed 02 Jul 2025 11:01:19 +0000
Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: BFcxQTYC6gC2kCIDoTYVIPQjpxLvi9goIUn2Qfp2ueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:fe:dd:2e:73:63:c3:ba:b6:af:53:7a:c7:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Jul 1 11:01:19 2025 GMT
Not After : Jul 2 11:01:19 2025 GMT
Subject: CN=e5bb51ef5855509263bc23f7776e5ea7d32fa82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:28:22:1f:83:0d:ac:70:48:73:68:f0:41:
be:ca:42:b3:4d:1d:2a:75:45:f4:39:10:d2:59:0b:
51:b2:c3:5a:44:06:2b:4f:b5:1a:e4:32:41:e3:8c:
9b:c3:1d:95:d5:3a:b8:33:f6:e0:19:aa:d6:1e:f5:
5f:5d:dd:f6:98:5e:f5:ad:9a:8d:ab:1b:94:7b:3c:
c9:3a:91:0d:9f:1c:1d:3a:bd:c9:8e:a9:5d:21:ea:
23:4e:fc:e3:fc:f7:16:3d:fb:23:5b:c4:e1:ba:f4:
fc:e0:16:f1:e7:04:e2:e1:a4:40:68:e5:80:3e:cc:
10:d5:99:f0:60:40:d6:2e:5c:2e:20:70:c1:84:51:
82:59:40:1c:8c:50:6d:a0:b8:2a:43:4b:43:40:7a:
e0:8c:e7:9c:36:65:8a:7d:00:8b:b8:2e:2f:e5:91:
24:00:88:6c:e8:c0:a0:d0:71:0c:51:cb:67:b0:45:
a3:88:21:3b:91:6a:1b:ee:09:eb:d7:6f:d9:b0:37:
fc:f4:7d:2b:b1:b3:0f:fd:6d:5e:f7:76:6c:b7:b8:
b2:6b:43:0c:39:53:a7:90:8b:b6:29:09:8d:af:e8:
4d:38:f7:27:99:3e:c4:32:d7:31:2f:c8:bc:1e:9b:
a1:b6:ee:7c:76:c5:1f:bc:1b:aa:50:29:8d:ba:98:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BB:51:EF:58:55:50:92:63:BC:23:F7:77:6E:5E:A7:D3:2F:A8:2A
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:26:81:82:86:bf:42:ea:82:cb:0d:c3:3c:65:b8:6a:58:de:
bc:13:ae:4f:8e:c6:f1:5d:af:4e:59:4e:21:fd:1e:01:8d:ef:
b4:0b:6a:66:21:07:d7:62:91:5b:d1:06:4d:c7:c1:82:49:05:
ef:cd:3b:97:a2:f3:13:c5:d8:c3:b6:50:61:f2:ff:86:54:0b:
eb:1b:14:eb:d1:d7:7c:aa:df:05:d9:42:71:a6:b9:45:b1:03:
04:30:e2:62:d2:59:67:e6:26:c4:89:64:b6:84:a7:51:68:ff:
a4:53:c0:fc:4e:ff:e9:aa:33:d6:29:e0:7b:92:eb:c1:dd:91:
3e:5f:5d:66:03:ce:22:b2:23:c0:df:d9:e8:b1:58:32:b6:56:
c3:f5:1a:6b:a5:5a:e6:51:e6:7f:b2:88:aa:c5:5d:9b:e6:24:
b7:6b:a9:0d:ca:ec:0b:b8:ed:93:49:00:43:21:7e:57:e9:f2:
b2:f6:9b:ea:30:88:06:cb:6d:15:ef:9f:c3:15:bc:f5:19:f0:
a0:57:cb:18:c9:9a:99:c9:fc:47:01:4c:53:21:0c:e2:6f:93:
22:f1:91:82:64:61:fe:f3:34:42:96:48:f1:e0:ac:17:a9:ed:
02:f2:9b:78:77:52:52:46:e5:0d:ab:c4:ed:5d:ee:5f:46:78:
7f:3e:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:23:28 2025 by rpki-client