
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: x4W3m7veRZlE7DkA02XpNfLMmUCa3DW2AR/jvZN9XKY=
Subject key identifier: 4E:A3:9D:A7:DC:7E:EB:C4:BB:37:C3:C0:D9:21:38:36:B1:24:A9:5C
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 01974EFBFA1194E4D2CA48213B5E523ACF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0C3E
Signing time: Sun 08 Jun 2025 10:00:25 +0000
Manifest this update: Sun 08 Jun 2025 10:00:25 +0000
Manifest next update: Mon 09 Jun 2025 10:00:25 +0000
Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: gjvaWXRl2R8lvlJzVuOHrIvIcIHqaZIGhdG/f7MDXSM=)
2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:fa:11:94:e4:d2:ca:48:21:3b:5e:52:3a:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Jun 8 10:00:25 2025 GMT
Not After : Jun 9 10:00:25 2025 GMT
Subject: CN=4ea39da7dc7eebc4bb37c3c0d9213836b124a95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:c0:6f:79:5e:7a:ab:d4:15:f3:c8:a9:e6:
9a:aa:32:7b:02:f4:63:d3:2d:7d:00:af:57:06:9a:
4f:83:e4:7a:fb:da:cd:08:87:b5:59:03:5a:34:d6:
e6:2b:1c:a7:0f:37:29:e3:ce:43:8c:2a:9b:f7:46:
3e:55:eb:3f:f7:aa:66:16:3e:36:ad:ce:bf:16:e6:
1d:7d:3f:0c:55:c8:4c:85:69:7f:dd:64:8c:6c:00:
d6:94:15:6a:24:78:01:1e:be:72:29:31:8c:bb:ba:
78:57:77:75:9b:fe:02:8a:74:bc:6f:50:d2:c1:9a:
fe:94:9a:fb:ac:83:48:76:43:a7:fb:4b:e4:b6:a2:
cc:49:92:10:94:7d:90:4d:09:47:d7:c8:5c:73:ba:
2a:17:94:51:03:9b:20:2a:2a:f8:34:00:95:95:83:
53:4c:8d:8b:2b:00:4a:da:18:40:ad:b7:4c:c8:18:
2b:51:f0:cd:d3:41:12:b9:53:b3:93:93:e3:20:04:
a9:ae:2e:f5:aa:bb:1c:82:e8:59:dd:78:86:c3:ca:
7a:d5:a1:d2:3c:1d:2f:e0:c2:f5:66:4d:9c:b7:50:
69:9e:ff:65:4b:b2:b4:6f:c8:18:39:49:e0:d7:08:
9c:4a:c3:de:cb:7f:0d:81:7c:50:db:34:19:90:78:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:9D:A7:DC:7E:EB:C4:BB:37:C3:C0:D9:21:38:36:B1:24:A9:5C
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:49:6b:cd:05:36:41:05:07:2b:42:49:14:54:38:92:c3:
57:e7:a5:18:58:37:c7:dd:f4:65:f9:64:ed:fc:fc:d0:2e:c0:
23:10:fe:2a:72:6a:bf:72:87:b8:bb:65:71:0e:1a:31:cc:2a:
e4:72:af:84:93:29:c8:db:83:8d:9e:b5:b9:bd:dc:0d:09:f0:
7e:6b:91:59:ab:f4:fb:fc:ee:91:ed:6a:6e:ce:32:05:36:5e:
46:8f:6e:93:bc:be:8f:7f:f8:c1:7c:41:7a:0c:54:32:3a:82:
e5:38:13:ed:09:3c:c1:19:2b:b6:34:19:c2:a6:80:f3:d7:41:
af:75:14:0c:53:17:4d:9b:49:35:e7:54:93:5b:3e:2c:f0:18:
53:e7:49:d1:7a:c9:e7:a6:a1:41:8f:42:d6:ad:10:8e:02:3f:
3b:5f:5b:01:2f:51:2e:63:de:54:32:83:d9:96:d8:c7:a5:1e:
02:7b:36:79:f8:63:76:fc:89:a6:d9:12:7f:6c:b3:10:74:85:
c9:a8:9d:79:8e:34:4f:0f:a2:6f:01:68:0a:10:84:c7:9e:eb:
b8:00:3e:d4:33:af:91:33:a8:6d:bd:c3:8c:f9:12:9b:f3:e5:
fa:31:8a:5a:f8:5d:51:04:8d:bd:81:3d:02:97:f9:35:40:1a:
69:7f:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:22 2025 by rpki-client