Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: dXjyW8n20PFD70x5G3YlqjfrseNCcpPnM3BU8g2z9lY=
Subject key identifier: 68:C7:0E:4F:36:CF:09:F8:91:5D:D9:31:43:F3:44:D0:DF:E6:E4:3C
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 01975AC9BDF4C55970021D8D6B6C66FB7816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0DA3
Signing time: Tue 10 Jun 2025 17:01:00 +0000
Manifest this update: Tue 10 Jun 2025 17:01:00 +0000
Manifest next update: Wed 11 Jun 2025 17:01:00 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: 80GjQidAcYE3CykCF/UhOn0imA7aoYm7gN9GvsRRNbo=)
2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:bd:f4:c5:59:70:02:1d:8d:6b:6c:66:fb:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jun 10 17:01:00 2025 GMT
Not After : Jun 11 17:01:00 2025 GMT
Subject: CN=68c70e4f36cf09f8915dd93143f344d0dfe6e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:75:12:d4:4c:e7:97:b0:9f:ba:3e:d9:c5:
a7:c9:f1:bb:67:a8:f5:9a:8e:c4:38:0f:6b:80:0e:
18:46:a1:2e:43:38:a5:31:fa:2c:49:cb:ae:b4:61:
27:70:d9:d0:be:17:b7:79:3c:1e:22:0f:db:87:0d:
44:c4:42:82:bb:4e:45:36:69:f3:24:55:36:33:bb:
ce:84:ef:87:39:43:3b:20:f2:44:14:c1:68:a0:87:
6c:b3:7e:f1:10:5f:6a:13:c6:e1:13:65:e7:39:1f:
d4:07:c1:02:7f:48:65:70:e0:46:7e:43:f1:95:b3:
19:5e:00:08:06:81:2a:cf:67:6c:32:67:91:54:b4:
86:fa:d7:17:97:04:3b:c8:ca:e9:30:c1:09:56:b8:
2e:97:aa:97:e5:34:37:e6:66:af:4b:a4:ba:54:6c:
b6:2d:b4:e0:f8:14:25:e7:86:3f:93:5b:2a:bf:30:
5b:16:b1:94:e9:79:d5:69:59:9d:5b:7e:f2:92:a3:
e3:cc:d2:61:26:e0:fe:60:00:ba:59:94:3f:2c:49:
b7:9a:c5:05:c4:8b:9e:e7:5a:1d:d0:cc:63:f2:55:
d3:29:6a:82:e9:6c:48:e3:48:ec:07:da:84:3e:74:
97:83:ac:12:0c:69:ec:13:e1:1b:15:6f:11:07:ff:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:0E:4F:36:CF:09:F8:91:5D:D9:31:43:F3:44:D0:DF:E6:E4:3C
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:cb:6b:6b:b3:41:b1:50:04:89:7e:ba:9c:68:a0:4a:57:
e0:97:dc:78:d0:e7:70:32:ca:3b:25:05:61:88:c4:66:df:15:
a7:2c:02:b2:69:48:79:ae:77:14:af:7e:8a:b5:b0:7f:9c:3f:
3b:6a:1e:80:e8:08:a3:07:98:f5:1d:b2:44:b4:58:07:90:85:
23:60:3e:bb:7e:12:6a:91:f1:95:67:59:fb:94:23:5c:33:ad:
92:cd:2a:12:e7:43:73:c2:d2:21:8d:30:bf:96:dd:e7:b4:30:
7e:d9:03:6a:77:5b:5f:39:a0:6b:38:66:ec:c2:38:79:38:77:
e9:ad:be:2c:3f:68:d5:82:9e:7c:51:9f:8b:17:84:6b:07:1f:
05:9e:91:11:a4:31:c2:6e:37:2b:65:31:c1:92:eb:c9:18:61:
6c:d4:6e:73:91:65:81:fc:72:f7:f3:10:16:32:1e:be:f6:49:
3a:65:ac:1d:d9:cb:96:77:77:4f:ca:a7:1f:b4:b1:95:a9:f5:
a5:8c:72:9b:6c:d3:00:6f:78:52:23:bb:73:6a:46:7f:d1:25:
a4:f0:c5:64:b5:68:0e:5e:bd:1d:0f:fb:04:7f:00:fa:a7:0f:
ee:df:e8:0a:84:e9:39:c0:7b:d8:3f:59:02:3d:40:8e:a1:87:
8d:67:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:45:52 2025 by rpki-client