Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: tPPapehez4PdQ82H32rTguHKTly7NFk4YI31i23NRFE=
Subject key identifier: 9C:5C:A7:B3:C0:18:C9:45:A0:FF:D8:7B:32:B6:C0:CA:A9:13:F5:A9
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0197499F2C000E3D75A509A535841D2501F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1175
Signing time: Sat 07 Jun 2025 09:00:57 +0000
Manifest this update: Sat 07 Jun 2025 09:00:57 +0000
Manifest next update: Sun 08 Jun 2025 09:00:57 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: Bvw1KGPexqNxHLwjGhniBqKVd08JZug8qM0GshvXLko=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2c:00:0e:3d:75:a5:09:a5:35:84:1d:25:01:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jun 7 09:00:57 2025 GMT
Not After : Jun 8 09:00:57 2025 GMT
Subject: CN=9c5ca7b3c018c945a0ffd87b32b6c0caa913f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:70:12:8c:93:41:b3:0c:c2:17:bb:0c:0d:
23:e6:6f:df:9c:51:82:be:fe:2e:58:49:e9:32:80:
15:83:fd:c8:25:6f:c7:b8:b7:c2:43:e7:0c:15:b1:
79:ac:48:df:d9:4c:13:3a:5c:99:2f:df:25:02:7a:
49:8f:59:7b:7c:2a:46:c6:62:32:fb:b1:8e:13:57:
02:4f:03:7e:4c:3e:2d:af:b7:cf:01:3c:e8:f0:41:
57:20:06:a1:1b:4b:c8:da:68:e2:0e:87:97:96:86:
f6:7e:60:1b:56:0d:78:f4:63:63:42:69:a8:43:29:
5c:54:08:dd:14:db:1b:b7:3a:8b:cf:48:b2:1a:ac:
91:c0:f6:85:58:be:5f:e5:2d:4c:4e:8f:93:aa:b6:
a9:87:8c:e7:c8:ea:97:98:d4:fe:e9:60:98:67:45:
19:2b:5d:ca:05:65:13:f4:d0:df:d7:76:cb:97:3b:
a8:35:86:eb:c8:e2:6e:c6:b8:0f:13:a0:63:dd:6f:
0a:53:03:8b:6e:8a:bd:6c:d3:62:e6:f5:c7:bb:08:
3b:17:04:9e:f0:f7:49:01:59:77:aa:85:8f:19:61:
7e:65:2e:9f:a0:28:43:82:fe:94:53:32:0a:24:57:
61:00:f3:dd:3f:eb:96:a7:e4:78:c6:42:26:95:a5:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:A7:B3:C0:18:C9:45:A0:FF:D8:7B:32:B6:C0:CA:A9:13:F5:A9
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:47:4f:56:3f:3c:80:b2:16:e7:32:57:e0:5e:0b:39:f4:
66:ce:e4:c3:5e:b4:5c:85:02:23:33:84:0f:67:59:db:5f:c2:
b1:0d:69:45:60:59:b3:51:3a:d8:87:e3:e6:1f:cd:34:01:29:
eb:5a:1d:5c:71:24:3a:6c:26:1d:30:41:43:c5:1a:6c:a8:b3:
4f:2d:21:fc:ac:1f:46:2e:c1:63:87:40:f2:83:0a:76:d2:05:
12:de:7c:fc:c7:31:32:4f:0b:bd:8b:4f:37:53:11:94:7c:fc:
b0:67:e8:1a:8e:43:de:98:cb:fe:a2:4e:f8:b1:9e:2d:ad:38:
54:af:17:f9:bf:4f:9c:5b:c9:1b:9d:08:80:ac:50:ab:a1:83:
14:42:b6:c1:a9:c9:ce:57:f2:7a:d6:83:17:57:da:94:21:5c:
d7:76:fb:2b:c2:9e:9a:79:eb:bd:89:f8:39:d6:d8:d5:48:68:
b7:0e:51:a6:b4:4c:e2:f8:26:d3:8f:d0:1a:b3:95:b6:04:02:
0f:f0:85:a8:12:a5:74:01:b6:62:07:b5:49:c6:84:60:07:50:
dd:92:3b:60:e4:b5:53:56:56:51:8a:a8:d9:2a:74:64:57:7e:
2f:3d:a8:e5:91:e8:a1:73:ea:65:76:ae:6d:73:8c:51:65:39:
e8:26:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:17:25 2025 by rpki-client