Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: T013xiuCu5xB8XzKksv8chwMFwcjzQX/BSP34+PNAGg=
Subject key identifier: F6:1C:89:EA:92:52:36:4B:F1:2D:18:13:91:7F:A6:92:93:A3:70:BF
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 01975DCAACEF39DC479EF17F5DE1A89210E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0529
Signing time: Wed 11 Jun 2025 07:00:52 +0000
Manifest this update: Wed 11 Jun 2025 07:00:52 +0000
Manifest next update: Thu 12 Jun 2025 07:00:52 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: /jKgkHEgjB4J/WHQ1BiR18GHra0GX5S+GpVyWH/hWbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:ac:ef:39:dc:47:9e:f1:7f:5d:e1:a8:92:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jun 11 07:00:52 2025 GMT
Not After : Jun 12 07:00:52 2025 GMT
Subject: CN=f61c89ea9252364bf12d1813917fa69293a370bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:7f:96:cc:16:19:9a:fe:56:ba:b5:bf:fa:
0d:a1:52:68:e1:a0:14:b6:14:8e:d0:91:08:2d:c4:
eb:b0:17:8c:b5:d4:39:63:fe:5b:2b:2e:1a:11:c3:
0e:df:4a:12:47:29:b0:0c:76:12:16:89:32:6d:ec:
e2:d8:4c:5a:c8:0e:9d:e7:26:15:5a:bc:33:c4:fc:
61:47:3f:41:45:a2:2f:b0:45:2d:8c:ae:90:42:b3:
11:e4:c2:7f:63:9d:7c:11:79:7c:03:2e:b8:cf:5e:
96:99:48:fb:3d:59:c9:ed:c4:ca:b6:5b:11:a4:d3:
d3:1f:2b:bd:97:c6:e7:fd:c2:e9:52:6d:5f:76:92:
12:66:92:72:ca:80:2b:bc:07:45:c5:5b:ed:04:11:
40:42:1b:93:fb:0b:44:d3:dd:95:35:b1:12:8a:a9:
f3:0b:4f:1e:5a:37:66:9a:4d:fb:aa:e4:a9:0c:64:
97:9a:50:77:3a:5c:03:79:06:f0:e0:02:cd:6d:6f:
fe:4d:92:9d:4d:86:a2:9d:98:aa:28:e3:ad:c5:51:
9b:84:22:cd:37:5a:f5:9c:96:cf:29:fc:33:0f:b1:
39:97:00:8c:53:79:27:f2:de:94:a8:3c:00:a3:ea:
9c:6d:a2:27:ad:49:d6:d0:ca:a4:0f:2a:37:2f:c5:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:89:EA:92:52:36:4B:F1:2D:18:13:91:7F:A6:92:93:A3:70:BF
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ab:ce:bf:ea:b3:46:b2:f1:c8:f2:45:8f:38:94:55:a5:76:
25:8e:96:ad:df:d5:60:33:87:c9:27:a3:ff:5c:79:e5:99:c1:
d4:19:32:6e:8a:cf:6a:6c:a4:6f:88:74:74:fa:2f:27:f6:92:
c1:0b:3d:5c:ca:1c:c2:a3:7e:98:48:10:f2:08:bf:e0:3e:b7:
a5:68:b9:72:e5:ee:26:89:08:3b:ee:83:5f:ce:bf:0a:f5:ce:
68:89:33:25:5b:3b:24:56:9d:45:ba:53:7c:3d:e4:5e:99:56:
e1:3b:c8:ab:15:51:29:6c:3a:61:51:cb:cc:b6:86:c9:a1:84:
03:d8:2c:83:0e:1a:0d:7b:37:1d:b5:e3:35:9d:4f:7b:04:4d:
d0:9c:41:41:44:59:e9:be:7b:38:1f:bf:1d:22:65:3a:1a:28:
ef:fb:93:62:e3:ce:ad:1e:ec:f2:c2:4b:f5:a2:dc:72:d5:75:
e7:e0:0c:a9:a5:bd:43:38:94:72:30:3c:79:96:64:79:2a:9d:
6f:cd:00:4f:44:1e:59:cf:b2:2f:02:88:16:ac:2e:c2:67:27:
c2:be:b2:94:12:a8:1e:c4:de:67:50:ab:af:3a:db:e8:25:a3:
5d:e1:00:69:01:60:5a:1a:3d:a7:4f:af:b1:40:73:37:f5:ce:
c5:86:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:58:28 2025 by rpki-client