Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: KVha/WpIMZl17DtPCichrf3DEHbTcW9E/51JDmAa/s0=
Subject key identifier: C5:C1:0F:2E:33:5F:11:FF:4C:EA:46:82:D4:8E:0F:E5:D1:96:DE:B8
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01976282B7F93A7166522BED5AB46C796F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0D3C
Signing time: Thu 12 Jun 2025 05:00:23 +0000
Manifest this update: Thu 12 Jun 2025 05:00:23 +0000
Manifest next update: Fri 13 Jun 2025 05:00:23 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: Q2adjiw2DJQuOrnwNZnTH2MzYHYEw9N3FhfEUoyXElc=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:b7:f9:3a:71:66:52:2b:ed:5a:b4:6c:79:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Jun 12 05:00:23 2025 GMT
Not After : Jun 13 05:00:23 2025 GMT
Subject: CN=c5c10f2e335f11ff4cea4682d48e0fe5d196deb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:25:6e:27:77:49:a8:0d:e1:6c:5e:b0:93:
44:eb:69:9a:a3:5f:c2:5f:1d:c8:ad:cc:f3:a0:99:
c3:d4:51:81:00:bd:60:6a:64:c7:80:d5:57:11:c6:
a7:69:b4:86:e6:01:80:03:dc:7e:8a:d2:d4:d4:ac:
36:ab:70:7e:db:b4:47:e0:31:08:c5:1a:bf:a6:c7:
83:4c:f3:68:79:3f:da:0a:73:49:4f:be:05:a8:c8:
d1:04:8d:3f:9b:f5:1b:cc:2c:9d:b0:d7:64:58:9a:
1c:20:e1:60:fc:cd:1d:c9:2c:60:95:72:75:32:bc:
fc:1f:41:62:3e:d2:b3:82:d0:93:f2:9a:e6:6e:f9:
d8:0c:15:e4:a1:ca:a4:ff:7e:ec:60:a6:6b:38:12:
99:55:5b:ee:18:be:dd:c2:ba:41:52:1a:5c:54:a4:
5a:cc:dd:56:43:d7:2b:19:36:d4:e0:17:fe:cd:5a:
53:c4:c3:c2:b8:21:7c:1d:01:61:30:bc:a7:96:18:
24:45:c4:57:d1:81:65:28:cc:25:f3:50:c7:c0:40:
d4:e7:a5:37:ff:ae:a2:8e:4f:07:5e:c2:7e:b9:44:
12:2c:f3:be:2d:46:a7:4a:9e:a0:53:79:66:ce:5d:
0a:b2:d0:d3:b5:ec:85:de:eb:f4:3f:ac:da:78:e4:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:0F:2E:33:5F:11:FF:4C:EA:46:82:D4:8E:0F:E5:D1:96:DE:B8
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e1:3d:77:ca:f6:25:65:08:4a:f6:f3:33:8d:75:66:48:5a:
62:5c:0d:29:6a:f9:2e:01:a2:76:2a:89:fe:18:f2:8f:8a:15:
cf:94:57:56:6d:65:d5:c1:64:b9:86:dd:b5:d2:6f:a5:26:19:
4c:d8:29:79:30:7d:e1:7d:c8:ab:a7:03:23:54:8c:aa:d1:06:
a3:69:34:6b:8f:c4:4b:7d:30:b8:bf:86:48:18:81:5e:6c:b5:
a7:3b:64:fe:a5:3d:54:62:ff:10:99:9f:43:df:30:49:1a:20:
9c:df:c2:8c:f6:b1:c1:e0:9b:e9:25:8a:e2:6a:60:a3:62:38:
35:21:94:38:e4:83:3e:ee:74:7d:3e:26:65:c5:14:f0:ea:2d:
7b:bf:38:51:3e:f7:66:a6:15:c2:50:6f:8c:19:19:74:d2:4d:
92:6e:06:fb:15:45:1e:c1:39:c2:22:a1:c2:7c:6e:8a:51:ee:
9f:d5:6b:bc:7d:a6:73:f9:bb:ba:67:95:81:08:55:4e:f4:7b:
ed:e7:6e:ca:10:8f:94:8e:b9:cd:cb:2d:26:26:3f:28:b1:e7:
94:3c:e4:03:f2:8b:d7:d5:fa:4d:16:1f:8a:72:ae:68:3d:78:
cf:ad:16:e8:b5:28:a6:5e:af:a2:1c:17:b2:45:ed:8a:fe:e7:
a9:ed:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:03:12 2025 by rpki-client