
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: zD/Lgp7P15naBPzaxXTNWTIFzdUk2jalhg9d6VZPe9c=
Subject key identifier: 39:60:8A:71:05:F2:58:BB:AD:89:CC:2F:E2:DB:B7:3A:0E:2B:FB:D3
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 019748FA3A02F2A105BCCA1F7C90D37B8F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 7B
Signing time: Sat 07 Jun 2025 06:00:47 +0000
Manifest this update: Sat 07 Jun 2025 06:00:47 +0000
Manifest next update: Sun 08 Jun 2025 06:00:47 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: cop5LoW+qwIqsL6mDwyY4M0r0SswfvMvPN2a0nl4tCw=)
2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3a:02:f2:a1:05:bc:ca:1f:7c:90:d3:7b:8f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Jun 7 06:00:47 2025 GMT
Not After : Jun 8 06:00:47 2025 GMT
Subject: CN=39608a7105f258bbad89cc2fe2dbb73a0e2bfbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:cb:8c:41:42:2f:30:d2:6e:c9:99:61:43:
98:77:a7:0f:45:ef:3d:5e:bd:1c:52:e1:dd:31:9c:
31:b9:3a:f0:7f:3f:36:b4:49:43:21:38:7b:bc:5e:
f4:7e:7e:47:85:61:3b:50:68:4b:02:1b:81:df:95:
be:8f:a7:0e:26:37:6b:30:0d:7f:5b:30:f3:02:57:
7e:77:0c:a0:f9:3d:ef:0e:8e:d4:b3:4f:64:5b:85:
fb:e4:c5:78:c3:25:30:2b:0c:0a:a6:ca:65:c0:a7:
06:a1:c9:f7:45:2d:3f:b3:93:03:c4:16:3b:b7:59:
7d:70:f5:bf:42:68:e7:00:32:d6:de:b8:6a:c9:0f:
7f:43:63:a0:76:be:15:63:9b:b1:0b:ab:46:4d:95:
3f:dc:16:1d:23:85:ae:92:ea:b7:1d:88:79:6b:c4:
15:bc:af:a4:b3:c7:6a:73:07:71:4f:70:71:5f:4b:
d4:9c:d5:20:56:68:67:a5:b9:ed:17:f2:89:00:91:
ba:38:7a:e3:78:e8:0b:f0:33:78:d4:da:9e:24:9a:
79:5f:ee:f2:b0:23:46:40:d7:87:d1:f5:56:a8:d4:
f9:b8:b0:06:f6:e0:62:52:07:51:b9:0c:9e:95:35:
d5:ec:08:ac:cf:9a:4f:0b:c9:48:ee:73:7f:9b:bb:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:8A:71:05:F2:58:BB:AD:89:CC:2F:E2:DB:B7:3A:0E:2B:FB:D3
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dc:45:6f:98:63:47:3f:fb:38:d7:2c:e7:76:0d:b2:11:bf:
42:06:ed:63:cf:ae:d6:74:32:51:83:c1:03:d4:44:c8:91:58:
98:ed:91:0b:ee:a1:a9:a8:4c:ff:bf:b4:87:12:fe:72:25:83:
f5:b1:fa:97:59:98:ae:bd:e3:19:ee:40:68:f1:a1:17:34:47:
a8:f5:f7:7b:58:fd:b8:da:55:08:93:ca:c1:f1:2b:39:8d:b3:
ba:54:36:59:c2:ae:c1:70:b1:23:51:c5:2f:b6:9b:b4:81:db:
cf:de:29:39:c2:d9:49:63:73:70:7e:c8:33:02:8f:7b:1d:58:
b3:49:6b:df:28:a9:07:97:42:c1:00:49:58:3a:e1:29:00:5d:
e2:79:9e:3e:74:7a:da:8f:f5:e6:1b:e1:6e:b9:cc:f9:45:5e:
51:6d:cf:0c:3a:10:64:8e:1c:1d:d0:5d:cb:84:1d:51:38:75:
d8:53:33:cd:4a:d7:8e:9e:5e:0f:60:23:f2:f0:6a:11:db:ed:
38:a6:5b:9d:f3:61:b1:95:be:c0:99:23:85:02:61:e7:51:9d:
9a:80:6d:99:c5:8b:15:2c:e4:47:44:d7:99:9d:18:f7:aa:f6:
4e:b1:13:a1:0b:fe:4b:f3:c4:23:80:ea:90:d7:5f:fe:0c:3f:
1c:70:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:06 2025 by rpki-client