Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: t57PzO5Vkv6lXQHtLJdBgQN8hJ15qkeESW32qmGtUzI=
Subject key identifier: 71:12:8B:FB:F5:C2:0A:5A:99:24:96:B9:4C:DC:F1:8B:70:4A:93:C3
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0197542332157E6F1D067411E63D1FED9F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0524
Signing time: Mon 09 Jun 2025 10:01:22 +0000
Manifest this update: Mon 09 Jun 2025 10:01:22 +0000
Manifest next update: Tue 10 Jun 2025 10:01:22 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: 4eTfJcR6rusdfWUxL0SP2W2rP6ploqGnof5TG20LQdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:32:15:7e:6f:1d:06:74:11:e6:3d:1f:ed:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jun 9 10:01:22 2025 GMT
Not After : Jun 10 10:01:22 2025 GMT
Subject: CN=71128bfbf5c20a5a992496b94cdcf18b704a93c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:10:39:0f:9d:36:cc:30:3a:7e:55:64:c8:
4a:56:99:3d:28:d1:be:76:e3:53:57:49:87:a8:29:
55:7d:aa:59:e6:b8:13:4f:8b:55:a7:24:f6:e0:fa:
96:df:ee:72:77:cc:41:eb:e4:07:16:d7:08:8e:1c:
b1:8e:90:99:36:41:54:78:38:3c:98:67:8f:ea:76:
78:a0:65:33:bb:db:f3:e6:c7:94:09:3a:bd:17:02:
b6:9d:a6:40:31:94:86:b0:ed:24:6e:87:19:09:64:
e6:fd:a8:43:d8:86:15:ed:8f:6a:20:bd:6b:4f:8b:
16:80:ac:03:bd:e9:e8:86:9a:50:5d:79:5c:44:c4:
b0:c3:33:06:3b:68:88:19:15:f6:db:eb:03:99:3c:
f8:e1:50:1f:66:d8:21:60:ea:59:3b:f2:e1:b3:46:
1b:82:6f:89:e8:83:bf:24:a7:f0:ad:49:36:ab:bf:
9c:da:8f:2f:10:ae:c1:1f:49:ab:16:cc:20:ce:a6:
87:dd:40:a1:f6:aa:34:d8:b0:af:bc:4e:cd:c3:91:
f8:80:f9:6f:a6:59:9c:39:bb:08:f2:c8:ad:dc:80:
83:6d:a1:54:31:35:bf:34:4b:c0:fb:d7:7d:31:f5:
9b:d7:c7:ff:00:12:22:45:52:51:6e:b4:20:7d:5a:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:8B:FB:F5:C2:0A:5A:99:24:96:B9:4C:DC:F1:8B:70:4A:93:C3
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:31:3a:bd:39:be:ef:2c:a9:b1:cf:a2:93:3e:6a:a3:a9:3b:
d9:b1:12:11:fc:03:bf:cc:78:4d:8c:83:44:55:ac:ee:8d:ea:
83:4f:9c:06:7e:9e:d0:d1:7f:10:39:93:8f:15:da:7b:ac:79:
6a:c0:52:a2:2a:9d:3f:be:da:76:e6:97:51:64:1e:d7:5b:f0:
e6:70:64:cf:0b:89:12:bd:42:b2:33:d9:54:53:b5:1f:b5:5e:
c0:c0:4d:ca:f1:35:75:18:74:b7:6c:3f:a9:68:80:2b:15:7b:
9b:20:10:6f:8f:89:5a:d5:24:a6:9d:ef:cb:e8:04:46:47:fa:
da:d1:5b:80:5f:e7:0b:c6:88:19:00:40:dd:b6:8f:33:f8:ff:
76:0d:4a:8d:7a:13:dd:65:9a:b2:61:23:37:25:79:c5:13:af:
23:7e:95:c3:83:af:6b:50:3f:af:15:08:9c:be:77:c6:4c:97:
d1:0d:f5:ce:bf:20:b6:8a:e4:47:aa:13:1f:30:e8:e2:53:0d:
df:d9:b2:26:0f:ff:fd:1b:a6:df:de:ea:b0:3c:c3:81:ab:e6:
a7:6b:d7:6d:b6:1b:6c:e1:13:55:ca:9d:56:89:cb:be:1d:fe:
79:4f:97:f1:12:84:22:20:74:d1:66:92:21:3a:95:bc:bc:ca:
d3:3e:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:11 2025 by rpki-client