Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: UKGdwEBnLAAGri9QNHOSNd1i5UlKUSghTXHvMTGaXEk=
Subject key identifier: C5:E9:D2:8F:5C:53:CC:F3:DE:D7:63:03:A8:F1:2B:F6:B4:13:29:C5
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01974B8D667E9B371F69A2475F82FAE56D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 05A0
Signing time: Sat 07 Jun 2025 18:00:47 +0000
Manifest this update: Sat 07 Jun 2025 18:00:47 +0000
Manifest next update: Sun 08 Jun 2025 18:00:47 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: /mkFbIaediG9iS8YxeIUFB3Hcq1/grZcg8zSVUxf82I=)
2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:66:7e:9b:37:1f:69:a2:47:5f:82:fa:e5:6d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Jun 7 18:00:47 2025 GMT
Not After : Jun 8 18:00:47 2025 GMT
Subject: CN=c5e9d28f5c53ccf3ded76303a8f12bf6b41329c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:f7:0c:5e:1b:02:98:8d:36:1d:03:fe:f0:
e3:78:13:b4:02:d2:60:ce:95:ad:94:3c:c1:8f:34:
d5:8a:05:17:25:a3:4d:08:a9:be:7b:91:15:60:4e:
e2:87:58:9f:43:c8:73:34:47:fd:20:0f:90:0a:49:
a5:6c:2c:80:2b:7c:98:49:28:be:89:06:e4:38:6d:
b7:14:77:2d:35:e4:c7:c7:d6:b7:8c:92:50:7b:f5:
e3:b4:39:a5:e0:30:5b:9e:55:8f:92:42:ae:f0:e9:
bd:7d:77:3e:e3:19:ef:0a:af:fc:1e:5f:c8:68:99:
ee:70:8f:65:9d:c8:aa:b8:16:02:83:3d:1c:82:f0:
f5:17:85:ff:a1:7b:9e:c1:74:56:d7:e0:6b:c0:06:
4f:c7:2c:c0:19:03:4c:5f:e6:d1:8a:f9:a5:1e:5c:
c4:56:5f:ac:95:1d:30:5d:9e:23:76:79:2c:e6:36:
50:8c:9c:80:63:1e:10:f4:d8:b3:bd:ae:f8:a2:09:
f8:a1:14:ba:a2:29:6e:2e:27:58:df:59:47:84:3c:
6c:ac:b6:86:07:ba:42:e9:81:bd:32:69:4d:12:b9:
62:45:bf:18:b7:a1:63:f7:08:d2:2d:d6:21:db:d6:
9a:eb:21:c7:ec:7f:cf:2b:cb:88:7a:5c:34:cb:89:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:D2:8F:5C:53:CC:F3:DE:D7:63:03:A8:F1:2B:F6:B4:13:29:C5
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:17:be:3e:1f:37:8e:94:38:12:ad:31:01:46:e1:c3:af:
01:15:7f:59:7d:ba:4f:2c:e2:ff:12:35:29:41:d1:2d:66:03:
b8:f4:5a:1e:c7:22:58:e7:f3:12:7d:b7:35:53:3d:0a:a9:fc:
82:d6:8d:e1:49:97:db:55:b9:be:c9:95:d8:75:5a:9d:d9:f3:
4c:0b:1a:09:c6:af:e7:41:94:8b:ab:73:d0:a9:1b:0d:90:13:
09:e0:e0:90:68:8c:f7:c8:c4:a0:83:8b:6d:28:37:80:92:e1:
b5:33:61:f7:c3:d3:53:ea:20:ca:7b:7d:ea:b4:2b:e0:27:ca:
dc:03:a7:a1:a5:b5:3b:df:97:ca:a0:2d:98:02:77:c5:fe:5e:
67:60:13:fc:d4:78:71:19:1c:36:61:52:39:1b:ab:6a:59:53:
20:eb:3c:ff:ec:a4:ad:6b:9b:7b:64:e4:7c:f3:bd:3b:da:8e:
9e:dc:a5:37:fb:8e:86:75:e7:f5:8e:df:c9:d3:0d:67:69:ad:
57:64:24:85:a9:a0:68:fb:1b:16:b5:d5:81:05:f5:45:77:53:
ef:9b:a7:0a:0c:6e:f1:73:b7:fa:cc:22:2a:1f:a8:51:18:5a:
fd:28:15:8a:42:27:8b:96:72:f6:f5:40:7b:93:f2:53:e3:f2:
52:4a:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:44 2025 by rpki-client