Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: 0Bn0yUuJatJ2H3L+uy0Xjkj2+Fhuz0PqjaSK3VsVI0M=
Subject key identifier: 29:5A:7F:27:3C:76:81:1E:98:15:75:CA:4B:EC:D1:BE:53:4F:5A:38
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019749D5942F1746D87D75201683D16A60B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0D4B
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: Asvf7JutCdVH8rFBHHzCv2++36rxTo21a3M2y98xoZ8=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:94:2f:17:46:d8:7d:75:20:16:83:d1:6a:60:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=295a7f273c76811e981575ca4becd1be534f5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:cc:f7:34:f8:62:05:04:f5:4c:1b:75:a6:
c5:b7:ce:50:53:73:04:ff:0d:41:ec:f8:e9:f4:ff:
90:7e:3a:55:0d:01:66:06:6f:b4:a5:f9:b0:f6:92:
67:e5:e1:32:cf:02:db:e2:91:1e:af:70:8a:2c:7b:
56:b5:fa:d9:81:33:a1:ff:f9:c8:64:b9:43:5c:4f:
f7:27:73:20:c0:a2:60:ba:a6:94:82:c9:37:67:88:
a9:b0:75:bb:a8:3e:ac:c7:0c:7d:2f:e1:ce:0c:38:
6a:84:f2:d8:57:5a:8d:3f:5d:39:42:7d:fe:1b:ae:
ab:b9:99:ac:03:31:d6:35:79:eb:c2:85:93:d6:42:
b7:4b:d6:a1:4f:74:4b:c6:7f:e6:bf:6a:0f:b1:2a:
5d:b4:15:24:46:76:65:30:fe:ac:da:b3:40:5b:98:
e6:f1:b5:69:24:c1:91:6f:11:38:d7:23:e7:bb:82:
5e:b9:d6:c1:e3:be:6a:be:5c:41:d4:b2:83:2a:13:
29:e1:14:8e:c2:c8:a8:8e:dd:d6:a7:ef:0c:ba:98:
16:27:5d:0d:37:53:c6:1c:67:41:2d:4c:82:53:dd:
c9:e9:d9:69:4b:d2:d5:32:e3:1a:62:21:f7:7f:b9:
5a:d7:5e:ca:ee:60:c3:01:76:58:b3:14:2f:6a:6c:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:7F:27:3C:76:81:1E:98:15:75:CA:4B:EC:D1:BE:53:4F:5A:38
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:74:45:8b:bf:97:75:ad:12:39:62:1c:ec:75:a7:3f:8a:73:
79:c9:c0:b6:2a:35:94:07:ef:f6:32:8c:29:5d:f1:7f:16:4f:
3d:d6:da:03:d8:ca:8a:88:cc:bb:98:4c:69:03:60:b1:48:51:
3e:0d:03:38:e6:4b:51:8f:34:8a:1a:4f:10:0d:b7:6e:0f:62:
63:1e:84:fc:2f:3e:3a:46:33:d0:2c:d1:25:4b:58:b9:8f:96:
35:8c:18:97:84:13:2e:51:0a:b3:16:ba:7b:9b:8a:70:16:67:
90:18:50:ee:de:db:55:54:0a:3c:6b:d7:90:ac:fb:48:59:ab:
8e:50:c4:2c:8e:cf:67:fb:b0:61:2d:61:f8:7d:ae:89:48:99:
f0:a4:5c:7a:c5:71:18:de:cf:1e:1c:54:ad:c1:c7:a1:59:b5:
93:65:4d:bb:40:75:1a:bc:e6:26:93:9c:ff:44:c4:ef:5d:91:
c0:1a:a9:69:49:5f:35:4e:8e:12:de:b7:7c:d1:db:04:5b:c4:
1b:45:16:f1:d7:8d:1e:80:a2:80:52:0a:bc:3c:ae:51:1a:4b:
ba:70:38:ed:42:0e:f3:9b:c6:91:1b:c3:ff:77:23:2a:4d:79:
f3:91:11:22:63:f0:52:57:ef:b0:d5:b9:14:7b:61:20:d6:01:
19:f3:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:01 2025 by rpki-client