Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: QtLbGt+/qLxkBTOfh9vXrBrwZiIeVUp6eb9Utsqio9Q=
Subject key identifier: F4:96:3E:29:09:48:C6:9D:5E:4C:EE:82:31:BE:ED:BA:C8:66:DF:99
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 019764DF5D4F75DEECBE733AA6C39F2395BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 16:00:49 +0000
Manifest this update: Thu 12 Jun 2025 16:00:49 +0000
Manifest next update: Fri 13 Jun 2025 16:00:49 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: jewqAx6+NgHSKuvB4au9f9zduT2W118/EfIJwKb0Vq0=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:5d:4f:75:de:ec:be:73:3a:a6:c3:9f:23:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Jun 12 16:00:49 2025 GMT
Not After : Jun 13 16:00:49 2025 GMT
Subject: CN=f4963e290948c69d5e4cee8231beedbac866df99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:b5:36:e4:e0:47:fd:cb:5a:59:59:e4:74:
b8:0c:2f:6b:ea:4e:57:ce:e0:01:69:b5:94:1e:76:
f0:74:b2:07:fd:1e:ce:9d:e7:89:dc:5c:64:d4:36:
50:f3:6a:1c:c5:89:60:24:25:41:b2:2b:3d:8f:34:
64:5e:7a:69:31:7b:7e:fd:2b:2a:56:0b:66:9a:2b:
74:a6:84:5e:42:4f:18:c2:5e:19:30:c6:b5:16:43:
5a:fc:ce:e3:41:cb:2d:8c:7e:a6:33:22:fc:23:74:
dd:84:6b:16:87:1a:37:4b:73:0c:db:89:21:b9:a0:
ce:4f:c5:9e:5a:2b:97:86:ce:b5:6f:13:29:d0:a1:
38:83:fb:18:d4:c0:c4:f9:8f:b5:08:77:11:e9:be:
33:21:8b:33:f8:60:9d:fa:c1:02:8c:e5:27:74:a6:
dc:e6:b2:35:98:a4:20:ac:67:02:35:6e:de:62:a1:
fc:58:28:24:27:eb:d9:5e:d6:05:df:eb:ab:9d:6a:
2e:ad:e8:ac:b2:3a:29:c5:c3:7a:84:d2:75:44:18:
b7:c7:7b:14:b1:3d:e8:70:15:73:65:44:70:6b:f6:
b4:24:0a:3f:1a:26:bb:45:59:64:83:4b:2e:ab:ba:
3f:19:a3:f3:01:ad:8b:22:d2:e1:5b:41:3a:6e:0f:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:3E:29:09:48:C6:9D:5E:4C:EE:82:31:BE:ED:BA:C8:66:DF:99
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:0f:c9:44:b6:05:12:de:3d:67:85:8b:e1:93:51:3d:11:
7f:35:fa:50:f8:28:77:3d:16:58:2e:4b:ff:a3:c5:31:4b:7a:
f8:36:e2:66:b5:1e:da:30:f3:9d:66:9a:44:98:45:c7:0a:2f:
a9:4f:51:8a:c2:af:bd:94:f7:3c:a9:70:63:8a:9a:12:5e:13:
5b:1a:e0:e0:a7:ae:05:88:05:f8:ff:13:f1:98:72:4f:8a:cc:
09:18:f4:ea:e8:7a:21:58:7b:b8:8c:cc:b0:bb:6a:56:de:da:
f8:7b:a9:24:b3:1b:b2:62:c8:85:7a:2d:01:0b:d8:58:ae:31:
6b:1a:94:e3:88:98:93:1d:d5:f5:54:d0:f8:ec:9c:9b:a0:56:
4a:e1:c3:b6:67:8d:62:1e:fc:dd:ed:d4:0d:5e:31:14:74:5b:
1e:ac:f1:db:1f:6b:f2:a6:16:c8:a0:35:c1:62:1e:28:4a:24:
b5:10:78:bb:f1:d6:29:7c:d1:56:27:99:b4:67:12:b8:a3:e2:
bc:e7:bf:e1:0c:9d:3d:f9:5e:b2:6a:cb:7e:ff:25:a5:b8:0d:
83:28:9b:8b:95:a9:ea:1f:3d:76:4a:da:a1:87:0d:f0:da:8b:
38:4e:c7:23:f2:e8:9c:20:ba:fe:d7:ef:6a:73:5d:3a:63:ec:
5e:da:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:45:26 2025 by rpki-client