
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: NrHrgqafhpE8AQLGkP8ZfwH1KAa9rby82undKF+eq1g=
Subject key identifier: C5:33:13:F0:86:AD:AD:12:45:5A:47:E8:D8:EE:21:B3:C5:FE:7C:35
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019750462EAD731A61ED55EEB5FD645884EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 16:01:05 +0000
Manifest this update: Sun 08 Jun 2025 16:01:05 +0000
Manifest next update: Mon 09 Jun 2025 16:01:05 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: Xxlqc3HtTEwzsN9UHgaeqfA5qHDXZyjYkF1cP1lwoXo=)
4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:2e:ad:73:1a:61:ed:55:ee:b5:fd:64:58:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Jun 8 16:01:05 2025 GMT
Not After : Jun 9 16:01:05 2025 GMT
Subject: CN=c53313f086adad12455a47e8d8ee21b3c5fe7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:d8:9e:24:76:15:a1:05:8e:25:73:74:4e:
df:c8:7d:16:6b:de:05:0f:d1:3c:8a:da:22:a5:2a:
07:b2:08:a9:3f:3b:b2:dd:21:b2:d7:4c:c8:71:39:
56:2e:11:d7:00:d6:fa:7d:da:5b:ff:30:2e:ba:96:
22:f1:6d:09:76:c7:ad:07:1e:09:25:27:b4:3e:8b:
36:85:61:05:bc:82:01:39:55:95:3e:aa:79:f3:87:
e7:3a:c0:19:cf:33:5c:68:0a:da:bf:ac:5d:4a:b6:
96:92:3e:4f:23:ba:87:0a:14:53:9f:07:6a:b7:2b:
91:8d:59:28:ff:2e:57:17:51:02:93:1a:70:8c:6b:
44:78:00:31:ee:29:57:e2:d7:1d:4c:53:3b:2e:10:
77:f5:60:50:1b:ca:13:98:c5:04:61:4b:bd:d8:0b:
1e:fc:1e:7d:c3:4b:37:01:9b:7b:91:f0:76:09:b3:
0b:e7:d7:73:67:d9:73:90:b9:f1:a5:ef:13:f0:a0:
ca:48:0c:11:36:9f:17:ff:31:df:b5:3b:17:96:2e:
d5:88:3f:e1:55:b2:22:28:58:45:90:29:38:8c:98:
96:ca:4a:4b:e5:6c:ff:9d:c5:2c:ab:5a:fc:6a:56:
ed:6f:50:d5:20:ff:35:e8:f0:28:28:64:35:0a:a4:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:13:F0:86:AD:AD:12:45:5A:47:E8:D8:EE:21:B3:C5:FE:7C:35
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:a7:cd:7a:20:0d:c0:3c:f2:f8:58:64:10:8b:b4:b4:f7:
4c:36:76:ec:e3:f9:0c:4f:3c:67:e8:84:78:5f:68:c2:bc:70:
cf:9d:d1:14:ca:c9:86:32:51:af:c4:55:89:1b:f4:6e:7d:f0:
86:a7:14:2d:1d:83:24:c2:be:5a:84:57:23:8e:30:3f:3d:34:
21:a2:1e:62:e0:82:8a:b8:7e:51:30:01:02:4d:8c:b7:ac:03:
62:0b:d2:64:9d:2f:71:da:cd:e1:72:54:fa:69:d1:e2:63:5c:
d1:70:4e:b0:1c:ae:47:f8:a8:fc:5c:df:82:75:74:cf:6a:77:
62:3d:57:8d:33:77:e2:72:93:a2:ce:c6:1d:43:9c:7e:bf:81:
f5:5a:48:58:c4:15:ca:b8:1c:28:ef:06:5b:65:4c:ef:18:e0:
14:74:39:b5:9c:ce:ff:49:02:21:4b:80:b3:b9:8e:e7:d1:c3:
08:fb:dd:cc:ac:3d:d5:34:0a:df:b2:e7:df:7f:60:7d:79:48:
a0:76:52:18:e5:d0:25:c9:ac:be:cd:8b:e2:45:65:1e:c6:64:
c1:a4:ea:8c:a2:89:b6:50:f7:24:22:60:05:d4:31:f4:26:ff:
48:5b:d0:19:bf:43:ff:47:c7:cb:31:f0:e2:30:16:5b:ba:1b:
3a:5b:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:43 2025 by rpki-client