Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: FRMQ6p3LV6NOwaCNPMAOsBJgILClNn/a88ZE3MGELIE=
Subject key identifier: A0:CD:4C:5B:24:B2:06:84:09:AA:B7:73:A2:B4:67:8C:0F:1D:BE:36
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 019747B0A0833E2AAD053802DD5CFF659AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 1304
Signing time: Sat 07 Jun 2025 00:00:47 +0000
Manifest this update: Sat 07 Jun 2025 00:00:47 +0000
Manifest next update: Sun 08 Jun 2025 00:00:47 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: LJUbCMzg491INr8wAPXD7tm+rAOM407nDkf3WcZeRCQ=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:a0:83:3e:2a:ad:05:38:02:dd:5c:ff:65:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jun 7 00:00:47 2025 GMT
Not After : Jun 8 00:00:47 2025 GMT
Subject: CN=a0cd4c5b24b2068409aab773a2b4678c0f1dbe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:2f:a5:c6:82:79:db:e5:f6:38:b4:5a:1d:
0b:42:4c:30:65:30:d0:31:ff:ab:a3:7d:2a:22:ec:
62:b6:2a:b1:bc:4d:a6:91:92:b4:d7:82:55:67:77:
68:15:c5:d0:23:0a:2c:6b:5d:40:15:2f:81:25:e3:
61:15:94:4a:b7:d0:bb:ba:1c:c5:71:93:54:a5:17:
83:95:c1:db:ed:e9:56:23:04:02:7d:ac:7c:64:86:
0b:79:17:9c:59:71:2f:83:69:17:a1:c4:1b:d7:7d:
40:7e:e8:69:b3:fb:c4:8a:ba:37:3c:c0:57:50:c3:
82:60:b2:f0:cb:b8:db:f7:aa:e2:90:92:25:53:17:
3c:ad:c2:3f:41:34:99:d9:81:72:b7:1c:0f:8c:97:
1f:84:87:e0:ec:8e:c7:fa:62:d2:91:e3:9a:a8:35:
5a:2c:fc:9c:ac:89:38:42:2a:4e:39:f9:3c:cf:35:
02:1e:f8:16:1e:92:55:1b:d2:6b:cf:03:44:f0:77:
c5:0a:d5:18:4a:ff:10:b8:36:95:cf:b8:3b:2f:2a:
3a:bc:a7:7d:e6:d9:2a:33:30:f1:e0:2d:76:33:4f:
7c:18:2c:6f:30:f1:60:7a:e7:da:f4:77:03:98:7d:
13:22:6a:eb:23:16:c6:5a:7e:8b:76:40:b1:ad:15:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:4C:5B:24:B2:06:84:09:AA:B7:73:A2:B4:67:8C:0F:1D:BE:36
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:49:a2:b9:26:09:a6:02:e3:a5:e1:0c:d1:bf:00:64:4c:
4b:82:54:55:61:40:ef:45:58:98:eb:cf:35:de:82:5b:8b:93:
94:f6:28:d3:6d:34:64:e4:6c:9c:6a:03:73:b9:6b:db:0c:ca:
c3:89:57:35:b3:cc:5b:da:b5:5d:03:93:55:b3:be:d4:9d:d4:
3b:43:74:1e:7d:60:80:e7:6f:fc:df:6c:6b:bc:c6:80:82:3a:
66:5f:3c:bc:ac:93:a6:4e:fa:e3:6f:5c:0d:d8:e9:ce:d4:7e:
45:2f:2c:e6:74:10:f8:fe:d3:79:1b:5b:24:9f:a9:8e:f8:a3:
3e:8e:04:ba:aa:89:e4:8c:59:38:13:bf:0d:17:1d:1e:f2:83:
15:f3:c0:c8:e7:40:e8:51:e2:51:17:63:dc:46:86:95:e3:2f:
cd:50:5d:d1:15:51:82:e7:25:54:5e:bf:f1:99:78:eb:fa:f1:
ec:2c:07:1c:6d:17:3e:a0:f4:16:bf:be:49:89:4f:c6:8d:8c:
09:3d:ec:d6:ef:dc:69:33:e2:6c:27:8a:4f:f7:6c:03:17:93:
09:27:c7:15:20:3f:eb:c2:9b:0a:4d:7f:77:d8:ff:85:27:e3:
28:d2:71:41:ea:b4:90:f2:03:2c:d4:2f:39:26:eb:68:62:47:
4a:a7:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:08 2025 by rpki-client