Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: bWgBlPdekShNOkeaSKXALjYncG+oE+vte/qHTSnECEw=
Subject key identifier: 58:71:20:09:FB:8E:36:AB:6E:2E:A2:46:7A:3E:C3:46:A5:9B:50:89
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 0197488C9443771C05038A1BBACB2B7DEF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: aQcZYUI0VnwfgphvMyFAg3EzWIL/sRxGNYfBJImIerQ=)
2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:94:43:77:1c:05:03:8a:1b:ba:cb:2b:7d:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=58712009fb8e36ab6e2ea2467a3ec346a59b5089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:68:b4:67:5a:7b:76:ee:3a:e7:52:11:20:
e3:66:f5:e0:45:c3:c2:5d:87:86:0a:00:da:d6:bf:
7b:28:e6:a3:28:b9:bb:f5:b8:25:8a:51:4a:f4:39:
75:82:bb:b9:aa:6a:7f:f6:fa:a8:42:f5:c4:e3:45:
02:16:23:97:72:1a:b6:b7:41:23:d3:2a:11:d7:79:
95:f9:a9:87:6b:f0:f4:5c:1c:43:37:5d:76:60:93:
e0:07:e7:fa:d7:96:27:01:3f:41:64:47:27:06:7b:
f1:ab:7e:11:cb:1e:ee:78:53:ca:74:c3:5e:a5:51:
41:fe:85:a0:2a:30:17:dd:c2:ee:ac:a0:37:bd:13:
39:c0:6b:a7:e5:c5:4e:c4:b3:f5:a1:47:6b:b8:6b:
97:44:34:ad:e5:7b:9f:22:8a:33:41:4a:95:7b:64:
37:e1:52:53:6d:b4:e6:cf:bb:28:e5:7d:f7:fd:9b:
44:d3:7f:ba:7d:be:15:3d:d1:d9:3e:45:d6:09:be:
09:9d:29:83:27:57:98:ea:00:f3:7f:f0:95:d6:7c:
25:d8:b2:b3:1d:68:e5:3f:30:93:24:f8:0c:a0:b7:
0c:eb:6a:98:01:3c:25:1c:ef:48:c4:eb:4f:38:98:
dc:02:ee:fe:d8:1b:1a:99:b4:29:4f:c6:01:c8:f8:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:20:09:FB:8E:36:AB:6E:2E:A2:46:7A:3E:C3:46:A5:9B:50:89
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:40:61:d9:0a:42:28:47:05:58:5d:7e:01:aa:1f:5b:e0:ea:
22:19:02:7f:cd:20:fa:fa:2a:8b:26:e1:03:07:75:86:df:6c:
40:e9:22:26:81:4b:dd:a0:24:70:f9:08:e6:3f:58:87:f5:3f:
d0:1d:ed:ce:c8:b9:7f:98:de:8f:90:26:9d:da:c0:cc:e0:57:
d3:e9:a8:5f:0e:42:b8:84:8b:76:74:eb:09:88:98:a1:29:3c:
4c:97:86:5f:dd:20:8e:41:60:a3:b1:13:05:e1:27:0e:2c:20:
77:e4:9c:c5:97:71:f6:6b:a9:e8:cb:17:ff:d4:62:11:eb:c0:
b2:d0:ab:b1:49:b2:20:8f:41:76:57:a1:c2:99:7c:a6:01:c9:
74:e5:79:03:54:40:ad:d0:ae:c3:fa:e7:fa:ef:db:67:24:ae:
39:7c:4a:6e:dd:fc:64:69:b1:52:fa:31:92:8e:de:74:aa:a8:
10:f2:0a:56:7e:de:7d:4f:1f:60:ce:27:43:94:0a:42:51:5b:
f3:ce:3e:d2:91:88:0e:2a:48:6d:d8:33:a5:a2:18:ff:c0:c0:
4a:08:6e:85:61:20:a2:ac:c2:95:dc:a6:75:78:76:c9:5d:77:
0d:f6:2b:e1:89:1d:0a:17:78:90:f6:e6:39:ca:09:81:8a:56:
65:95:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:34 2025 by rpki-client