Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: 4tHsXjcgKIcoS1HEmGMJjj1zd+nlQRlnO5b3/VKIPds=
Subject key identifier: 9F:AA:7B:DE:24:CC:B5:CD:A8:58:5B:E8:4C:1D:BF:58:C6:75:31:4A
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 01976A3C97C3A04C6A2758DB795108601B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0D40
Signing time: Fri 13 Jun 2025 17:00:45 +0000
Manifest this update: Fri 13 Jun 2025 17:00:45 +0000
Manifest next update: Sat 14 Jun 2025 17:00:45 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: Zs4INJZ32J5ENz8JXL4bfTyTf2ElJxBRBwzCwpfLllo=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:97:c3:a0:4c:6a:27:58:db:79:51:08:60:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Jun 13 17:00:45 2025 GMT
Not After : Jun 14 17:00:45 2025 GMT
Subject: CN=9faa7bde24ccb5cda8585be84c1dbf58c675314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:0e:fd:d2:7f:46:9c:72:1e:ac:7a:11:f7:
be:bf:27:c7:f2:8d:fa:67:bf:80:6e:7c:14:54:ae:
99:f2:77:72:86:b1:02:47:6c:04:92:27:0b:5f:f2:
eb:de:cb:f3:b1:31:d4:4b:46:f1:f0:c5:ab:43:88:
68:e3:2a:97:ae:73:62:f1:a7:dc:7c:b1:22:d4:dd:
b8:7f:98:74:c2:16:aa:0e:d8:dd:a5:dd:ad:5f:b8:
2d:30:61:c8:f3:25:0f:58:8c:54:c0:8c:b7:f8:70:
4e:1c:04:f3:ba:a6:94:bd:79:c8:15:f1:72:1f:4b:
58:54:3a:4b:5e:f5:d8:d9:44:82:7e:d6:17:a6:3f:
c5:17:32:55:f6:1c:2b:57:d5:37:b7:d7:39:c4:22:
69:f2:b4:04:2a:88:69:d9:37:6b:fa:3c:df:49:1e:
7b:e7:50:b5:75:50:c6:4c:52:5d:a9:61:45:0c:8e:
65:6c:9b:34:52:bc:44:c6:b4:9f:b5:83:cb:48:43:
ac:d3:68:0d:d0:71:d4:db:19:76:8b:4c:7b:f4:f7:
ba:0f:92:71:18:06:c5:44:f9:38:3f:ba:fd:68:11:
e5:43:ef:1c:cc:1e:4d:14:13:93:4d:ec:e4:bf:54:
b7:49:4c:73:78:cd:46:bd:99:7c:35:54:6e:ae:30:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:7B:DE:24:CC:B5:CD:A8:58:5B:E8:4C:1D:BF:58:C6:75:31:4A
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:13:c4:69:83:82:5c:53:d2:3b:8a:22:c9:20:c8:32:63:dd:
26:4e:57:42:50:89:7a:64:58:50:7d:fa:f9:9a:fa:11:f4:bc:
d9:51:fe:9f:ae:ae:61:83:6a:ae:3b:b0:b5:50:2f:0f:87:76:
18:17:b3:02:a1:18:14:ad:e6:6f:1b:c6:cb:dd:d4:64:93:03:
53:83:2a:f2:1b:26:00:67:ec:56:30:49:f5:b7:91:30:b9:a6:
f2:04:97:98:1f:fa:ba:f9:81:a7:6f:d4:54:cf:b5:b5:b0:93:
af:bf:44:96:e9:56:30:5e:e6:0d:6a:02:61:ec:34:ea:a0:b9:
db:63:a4:2b:6a:53:88:79:54:5f:d9:19:4c:6a:4b:3b:e2:e4:
9e:4a:30:23:54:0f:f3:15:87:98:88:26:80:11:89:29:89:ee:
46:3b:19:56:96:47:87:c3:a1:51:dd:f9:ba:53:20:72:5f:f2:
4d:5b:44:04:bd:0f:19:0d:5f:c5:b2:32:69:b3:e2:a5:63:9f:
4f:72:52:5f:8d:a3:b3:17:82:5f:63:fb:3c:1f:b8:bf:15:a1:
7a:69:24:e4:bc:40:0f:a4:84:dd:cb:66:58:76:f4:79:70:28:
00:15:1c:57:9d:40:6c:ff:18:7d:0c:1d:5a:bf:5c:56:2f:45:
74:49:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:31:48 2025 by rpki-client