
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: 09gYIVRgjbLAGZTNc/VN6bTxwx0MJOfa7B2A5wSOAFc=
Subject key identifier: C7:10:39:53:A7:CA:94:8C:D5:1D:21:B5:5C:8F:B4:DB:F3:5D:DF:A9
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 01974E571D193071F8AE778671EBB67FD6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 0404
Signing time: Sun 08 Jun 2025 07:00:21 +0000
Manifest this update: Sun 08 Jun 2025 07:00:21 +0000
Manifest next update: Mon 09 Jun 2025 07:00:21 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: ne9yr0FxhulqO+dbDdH5stPo3MWKp+WsuqO7gRprPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:1d:19:30:71:f8:ae:77:86:71:eb:b6:7f:d6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Jun 8 07:00:21 2025 GMT
Not After : Jun 9 07:00:21 2025 GMT
Subject: CN=c7103953a7ca948cd51d21b55c8fb4dbf35ddfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:1c:3a:46:fd:13:dc:a8:b8:d0:61:cf:e2:
8a:06:a2:30:9e:c3:1f:38:72:5f:bf:6d:66:5a:7b:
43:54:5b:11:fd:cc:fd:af:be:df:15:04:b4:e7:d1:
c3:d6:e6:6e:56:b2:94:11:c6:4b:9f:40:d6:c2:8e:
46:7d:3f:4a:8d:2c:79:46:0c:74:63:64:bd:2e:6c:
30:9a:ab:79:e8:c3:aa:e3:a6:ea:83:31:62:f0:8d:
24:4c:7c:60:86:72:37:c3:08:11:31:27:c6:c4:ff:
ba:96:b4:41:95:d9:c5:f9:77:10:35:08:a0:d1:92:
d7:da:81:60:32:b1:e5:dd:e2:50:0b:52:95:c1:cc:
33:36:e9:bb:c1:9e:fe:e6:4c:42:ca:af:b8:c4:d7:
60:1a:96:b9:b1:51:27:01:ab:cb:ac:12:5e:79:f2:
c2:0f:38:c1:bb:72:65:11:46:c9:c7:62:c9:b0:af:
4e:0d:8d:7c:d3:2d:e9:c4:4a:a5:34:2b:3d:5c:09:
7d:26:b0:06:ae:a6:12:26:59:50:fb:e8:30:ab:5b:
ec:99:3e:08:b5:df:49:fb:bc:ab:12:88:92:df:d8:
e6:dd:d5:99:f7:83:fd:60:59:df:3b:ef:3b:b0:4e:
e6:76:79:44:52:59:d1:38:83:c1:bb:29:a7:58:27:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:39:53:A7:CA:94:8C:D5:1D:21:B5:5C:8F:B4:DB:F3:5D:DF:A9
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:94:25:b4:cd:62:14:de:1c:a3:57:94:7c:77:14:19:3c:
75:04:e1:de:b7:21:57:58:a7:74:e7:12:0a:4a:80:75:5e:99:
94:ec:96:2f:16:5e:26:d9:ec:95:e9:ef:92:d0:9d:15:3c:93:
50:3d:6f:8a:d2:15:64:a6:b7:3b:ad:d4:40:6d:92:80:19:bb:
e5:32:2d:1b:eb:81:33:fb:e4:5d:ee:44:32:8c:73:6d:dc:3d:
59:2a:d6:e1:97:e5:15:f9:ad:a1:65:1c:62:ef:b1:9a:c2:a4:
08:cf:1e:3c:79:64:0b:74:82:40:68:38:d7:68:5f:04:41:b6:
18:f8:48:f4:48:42:dd:7d:ce:e5:12:19:84:9d:79:18:e2:82:
a2:63:60:b2:fd:2a:9e:ff:7f:f0:8b:d1:49:fc:c5:a3:9f:f5:
51:90:dc:dc:06:4d:4a:12:b4:41:c5:0f:a3:89:42:56:fd:44:
57:08:c1:45:96:61:2d:44:47:c1:1f:b8:6b:4e:c7:80:3f:db:
0f:f4:f5:c9:cf:f7:89:50:ab:8b:00:d6:be:1b:55:75:0d:6a:
ce:92:a7:62:fe:ea:e6:50:9b:eb:f2:31:39:39:32:b4:cd:df:
c0:47:b7:e3:c8:d8:00:14:8e:56:1c:03:d9:6f:8b:61:a1:11:
5d:93:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:03:01 2025 by rpki-client