Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: AtHNy4rEMyK2P6OWhTDMoxgMhUHQ9kFHIaXEAyl/eY0=
Subject key identifier: 09:A1:CD:41:67:C5:C5:A7:8B:AA:F0:54:72:A4:59:91:81:2D:FD:60
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 0197518F32C44CB7779606EC39E121C2089E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0E05
Signing time: Sun 08 Jun 2025 22:00:28 +0000
Manifest this update: Sun 08 Jun 2025 22:00:28 +0000
Manifest next update: Mon 09 Jun 2025 22:00:28 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: weSt+3CQt/IC6a6yr/q9e+2QBD0gnBbLc4vwIeIQB5k=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:32:c4:4c:b7:77:96:06:ec:39:e1:21:c2:08:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Jun 8 22:00:28 2025 GMT
Not After : Jun 9 22:00:28 2025 GMT
Subject: CN=09a1cd4167c5c5a78baaf05472a45991812dfd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:39:4a:07:3e:ee:18:55:e4:b6:7a:21:f2:
89:d9:0b:79:d0:47:ec:f3:ad:4b:b3:b4:e8:f8:7a:
c9:01:53:d3:1d:54:2e:46:bd:7e:01:12:12:a3:4c:
31:23:c7:34:26:d1:18:f9:c3:af:57:6b:82:af:af:
86:9d:0c:57:43:a3:a2:2f:03:4d:82:86:93:40:89:
a4:cd:8f:0f:02:76:9b:ea:29:13:2c:f1:c3:37:34:
87:bb:29:87:65:d1:cc:3e:8f:57:c0:fc:b2:43:2a:
96:7a:98:2b:fa:58:59:2e:0f:8d:9a:6d:c0:1e:5f:
38:59:ed:24:6c:ed:d0:0c:ea:a8:15:d5:bc:c9:94:
7d:06:8e:52:19:f9:78:d7:a4:0b:db:0c:30:68:cd:
3b:d8:d6:e2:14:83:1e:6c:e8:88:8d:3c:94:0b:0b:
f3:4b:25:5e:06:09:f6:fc:ea:52:6d:ee:3e:7c:d6:
fe:83:b2:81:86:07:cd:16:5b:7c:65:be:44:f0:ba:
b4:09:72:97:7f:b2:13:27:a0:d4:30:05:0e:ab:d7:
04:4f:bc:da:5a:a6:39:5c:a9:c6:ad:e0:66:75:16:
35:de:98:5f:5f:7a:8c:c1:bf:59:a8:10:87:c5:89:
a8:41:66:a5:2c:53:c7:5e:85:37:9b:cd:f7:84:b4:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A1:CD:41:67:C5:C5:A7:8B:AA:F0:54:72:A4:59:91:81:2D:FD:60
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:3b:aa:e6:d0:dc:c2:e3:e7:cf:70:6f:a6:a0:88:d9:83:
4f:24:66:be:13:9c:c2:8a:55:cc:aa:62:3a:b8:a4:a7:aa:06:
94:e1:17:3f:de:44:a9:4b:53:af:52:28:8d:d4:37:6b:aa:e4:
57:cd:7f:e8:88:29:ec:eb:8a:07:8b:66:cf:de:21:f7:16:67:
29:86:02:03:92:ea:ab:8a:37:40:49:3a:f6:37:21:eb:59:33:
af:d1:c9:9d:5e:fe:c7:e6:b3:c0:8e:89:f2:71:79:58:c2:ff:
65:04:df:6a:4a:cd:fd:9f:3a:5f:46:c0:41:68:10:40:77:b3:
aa:b7:d3:d9:89:1a:3b:e0:c7:61:3e:17:bf:cb:f7:04:95:7a:
22:a1:3b:ae:47:a2:5e:c3:eb:18:8d:cd:94:51:d0:cb:f4:8e:
49:d6:61:b2:9c:1f:90:85:4f:5b:2d:b2:88:93:0c:af:ae:b4:
01:50:ed:a0:e0:d8:6d:6b:7a:f7:9e:86:10:1a:7f:6d:f4:a1:
c2:85:db:95:34:4b:ce:da:fa:3a:3a:23:b4:14:da:ce:2b:2e:
de:c7:8c:3b:1b:3a:68:14:81:f7:4a:e0:af:ff:e8:bf:58:ef:
29:db:8d:19:96:49:87:30:1f:4c:f0:a6:f3:bf:1a:98:45:59:
a9:f8:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:58 2025 by rpki-client