Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: 8rRpLDEdZML3fbvSB0HodzrImlo70vkxDQnG7s51rCI=
Subject key identifier: CA:B6:0B:AC:AB:C9:C4:D8:D8:AB:B3:B0:E0:13:90:D8:FB:67:1D:27
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 01974CD68CC74033632FBEBDD15BBF558AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 01EE
Signing time: Sun 08 Jun 2025 00:00:18 +0000
Manifest this update: Sun 08 Jun 2025 00:00:18 +0000
Manifest next update: Mon 09 Jun 2025 00:00:18 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: yVZKCwRJ1Rh5StjJxa9V6W/bUR54+fwzuA6nc97ygak=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:8c:c7:40:33:63:2f:be:bd:d1:5b:bf:55:8a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Jun 8 00:00:18 2025 GMT
Not After : Jun 9 00:00:18 2025 GMT
Subject: CN=cab60bacabc9c4d8d8abb3b0e01390d8fb671d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:bd:44:35:ac:2f:c2:a3:6e:70:5c:22:ff:
79:46:ae:cf:75:10:ef:1a:63:79:05:f8:87:5e:59:
1d:3f:c9:11:86:a2:f4:d4:2c:16:56:65:91:e7:50:
46:25:64:23:ef:84:5c:e6:92:ac:f2:cb:03:ce:73:
03:9d:13:6e:96:f7:95:8e:53:85:95:1b:9c:db:ec:
1a:e0:0f:4e:56:66:4b:ed:e9:81:ff:2c:2f:b8:30:
33:a9:54:8b:11:ca:51:fa:a6:ea:65:2a:a5:9a:1d:
3f:4c:7a:4b:15:1d:30:aa:97:f0:84:fa:53:8b:82:
a2:0f:5b:38:5d:56:09:7a:53:9f:ea:4b:b5:78:96:
3c:53:37:53:cb:55:0f:fa:87:95:ce:02:1a:20:7f:
01:ed:dc:3c:da:7f:34:0d:05:54:dc:2d:5d:b5:d9:
b2:82:53:bc:3c:6f:9f:b1:56:1d:39:78:07:11:0f:
02:4e:fd:3a:98:13:e3:a6:cc:5b:5a:0e:85:8c:42:
67:cc:ab:8f:98:bc:cb:41:1a:e5:95:29:25:86:9c:
31:d0:f3:3f:f2:eb:7c:e1:3d:17:51:93:5e:66:24:
f0:77:c6:27:ca:88:0c:32:a6:0b:2c:75:5e:5e:16:
6a:2f:e2:15:ed:6c:8a:1c:4f:59:a3:ca:2c:33:39:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:0B:AC:AB:C9:C4:D8:D8:AB:B3:B0:E0:13:90:D8:FB:67:1D:27
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:90:b6:0b:90:53:02:8e:41:de:87:58:8c:06:68:f4:6d:
bb:7e:c5:09:9c:8d:95:93:cd:b7:20:88:bb:15:ca:ab:7a:39:
3f:21:76:81:b9:34:ae:7e:e1:80:5d:2d:a1:72:20:e7:c5:b7:
3a:42:0b:10:15:b0:21:27:c2:f5:1d:79:59:49:d0:16:e7:a6:
57:1d:84:0e:e2:0c:b4:ca:bd:fd:e5:14:19:bd:32:66:4a:42:
bd:3d:0f:f2:18:2c:7f:e8:63:6f:21:0e:b1:17:c0:62:ec:79:
e7:1d:d5:89:92:cf:fd:be:a7:57:ee:59:f9:9a:68:61:a4:92:
79:2a:83:3e:aa:24:9d:8f:6a:95:0d:1b:f4:05:cb:72:27:54:
8f:eb:13:55:61:c7:5b:1e:b7:44:c1:6e:0b:e7:2e:ba:e3:87:
3e:86:cd:35:94:a2:77:c9:b0:52:f2:1f:81:76:6d:82:c5:16:
5a:e9:7f:31:2a:17:f7:85:81:5b:43:9a:0a:20:cf:c0:ab:62:
b1:6d:0a:27:d5:02:d0:e3:73:94:31:6c:29:5f:a1:ff:a5:e1:
c7:44:6e:f3:71:72:30:90:06:a7:8c:64:05:80:34:62:f4:fc:
05:1b:a9:27:9c:83:93:28:95:f4:fb:c4:f6:d5:2a:fe:a7:9c:
9b:8c:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:03 2025 by rpki-client