Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: H39NhiBNUYgzzCKNXuJVsTlQ4T2vL2t+24zFis4wRjo=
Subject key identifier: EB:0B:FB:25:9D:FD:49:F6:58:90:AE:39:99:34:C7:AF:22:B8:18:18
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019759ED6EC2BC1047A6C5382F07B83D7CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1216
Signing time: Tue 10 Jun 2025 13:00:21 +0000
Manifest this update: Tue 10 Jun 2025 13:00:21 +0000
Manifest next update: Wed 11 Jun 2025 13:00:21 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: AFsCDY46g5itzmqU9D79WTZKq/Y5C8PSgeT6CII20U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:6e:c2:bc:10:47:a6:c5:38:2f:07:b8:3d:7c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jun 10 13:00:21 2025 GMT
Not After : Jun 11 13:00:21 2025 GMT
Subject: CN=eb0bfb259dfd49f65890ae399934c7af22b81818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7f:65:02:50:67:a8:d2:48:f0:e1:74:84:76:
20:13:64:43:a8:4a:8a:bb:89:04:63:81:b0:4d:a6:
4e:1d:a3:63:96:42:e7:62:f9:ec:65:2e:40:d6:36:
5c:63:9b:53:49:5f:1a:93:72:45:e0:af:01:f4:30:
98:0c:64:a8:12:19:7a:49:ca:7d:4a:5c:c1:9f:dd:
ed:83:e4:92:de:3a:fa:a4:c4:ba:4e:a6:2a:89:49:
25:86:97:ff:89:01:53:8f:72:b9:c3:fc:1d:24:98:
fb:75:f3:5d:4f:6a:c5:0f:80:06:9b:4d:d3:64:f4:
39:bb:a1:f4:f4:de:06:1a:0c:1a:93:da:0c:aa:e2:
8e:e8:6f:72:14:9c:4d:40:9c:4b:f6:50:26:e6:7f:
aa:a0:5e:67:8b:69:09:03:60:e2:5a:f4:0b:00:ee:
31:a4:b1:77:2a:c3:ef:97:7e:b7:d2:e8:aa:8e:14:
1d:ff:13:4c:45:f8:7b:18:0a:9f:ef:f9:a2:9e:19:
0f:99:15:49:2a:ea:57:f9:6d:3a:98:a9:b1:07:d7:
70:a6:24:f5:75:7b:26:b9:c4:e9:0a:7a:c8:46:64:
8d:b9:99:fc:1d:79:6d:5f:eb:f4:b3:c8:a4:56:59:
2a:80:7a:bc:8f:81:a7:4b:79:08:56:b8:71:59:1f:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:FB:25:9D:FD:49:F6:58:90:AE:39:99:34:C7:AF:22:B8:18:18
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8d:ab:62:83:fd:6b:de:49:04:20:8e:1d:a0:9e:5f:38:17:
c0:7c:b5:a4:de:1d:aa:b7:b3:ea:f1:e9:26:41:9c:9d:a4:45:
b6:dc:ce:fd:9b:b5:8d:3e:7e:e7:bf:60:d3:e4:50:02:1a:97:
1d:4e:41:60:f6:c8:4b:61:04:0d:69:4a:b4:f9:db:b2:8f:61:
49:c6:95:d9:45:7c:9d:f7:6e:5f:53:d3:14:90:17:9a:4a:80:
fb:63:a4:ad:b1:06:9c:59:a4:0f:d5:09:81:52:8e:0b:4d:1e:
70:e9:a6:11:e5:c7:37:49:24:1e:be:40:0d:a8:96:18:29:84:
49:1a:9b:b8:7b:73:99:5a:85:b6:f9:40:32:10:d6:43:8b:bf:
2d:de:32:02:ac:7a:5f:d0:98:93:36:9f:de:00:8b:04:86:90:
84:1e:45:f4:97:8a:21:57:72:b2:f4:ac:a1:21:48:2f:d8:5e:
16:59:d6:22:d3:a7:19:cc:06:8a:66:b8:11:bb:f0:d1:f9:bf:
b8:b8:15:19:e1:1a:dd:42:04:5d:fc:23:ae:bd:95:cf:ce:1f:
69:c3:b0:e0:d9:66:88:9f:6e:54:56:dc:b1:fc:c0:68:4e:4c:
d9:4c:ae:b0:a5:20:54:34:58:e4:16:19:b8:ad:a1:b3:0f:18:
f0:13:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:54:24 2025 by rpki-client