Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: ph6NiFqceul8F6EddMJe7AeNWwiGzP0nSXkiSCrKS5k=
Subject key identifier: 40:C9:46:28:55:EF:F6:7B:AB:9F:FD:EF:83:21:89:3C:B8:C6:4A:C4
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01973874C46F33620EBCA8A6666E9F578018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1302
Signing time: Wed 04 Jun 2025 01:01:05 +0000
Manifest this update: Wed 04 Jun 2025 01:01:05 +0000
Manifest next update: Thu 05 Jun 2025 01:01:05 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: 4VgEMf2tEsHQAkdRMNxf0brfmPAcWWIVxKhDvki6bI4=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:74:c4:6f:33:62:0e:bc:a8:a6:66:6e:9f:57:80:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jun 4 01:01:05 2025 GMT
Not After : Jun 5 01:01:05 2025 GMT
Subject: CN=40c9462855eff67bab9ffdef8321893cb8c64ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:af:0a:dc:19:96:5d:43:bf:d5:0f:bf:c9:
bb:37:a0:bb:ea:7b:2f:0e:6f:22:9d:ee:9d:57:0f:
75:77:80:51:86:d8:6e:0f:33:a8:ba:87:fc:ec:bb:
1d:de:d0:6d:f6:5a:53:28:d9:99:fd:77:20:19:5a:
15:f9:06:7c:0e:b2:95:cd:ba:87:d5:f4:d7:40:bd:
9f:61:54:2b:56:b8:c1:bc:db:c8:3b:00:d6:68:fe:
46:d4:90:16:7b:f0:d4:f4:83:f7:9b:cd:38:ca:8f:
1a:e4:1a:16:35:e3:20:76:28:19:e3:14:de:de:ad:
fe:2a:9e:d1:4d:ad:dd:2d:dc:7d:83:9f:f0:3f:c5:
68:80:ef:b3:05:b6:68:9b:b1:f4:cf:52:87:42:2e:
5f:45:ac:e4:34:65:a6:3b:bf:3e:d1:23:68:4b:6a:
4f:b2:54:d1:96:b3:32:7b:4b:68:66:7d:41:1a:2e:
53:aa:f5:b5:7f:d1:c8:99:a5:38:3a:c3:9a:b9:62:
cd:5c:89:cb:a5:ad:1e:9f:1f:84:df:4e:09:c7:86:
1c:6f:dc:f8:cd:fa:df:05:48:84:f1:20:36:18:d7:
7e:2f:c5:4c:75:98:3b:94:06:d6:74:4e:0a:50:06:
04:12:1a:76:7d:c8:e1:6f:83:59:b2:33:41:73:a0:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:46:28:55:EF:F6:7B:AB:9F:FD:EF:83:21:89:3C:B8:C6:4A:C4
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5e:f1:aa:2d:53:a1:48:5c:fc:1d:0b:c6:cd:1a:29:04:b1:
d9:e0:c1:9c:b4:07:c5:1e:73:59:71:ee:bd:fb:3d:ef:8b:ee:
a1:ed:33:50:89:e6:73:48:31:c7:42:01:67:ac:97:94:fd:de:
ec:cc:0c:02:88:c4:b6:54:3c:df:a5:56:74:2b:77:1c:f7:a2:
6c:1d:61:aa:f9:39:fb:e5:66:50:24:8a:50:e9:7c:d5:5d:a7:
f4:80:9c:4f:fc:35:0c:ad:14:a4:2f:76:78:65:75:df:c1:c3:
a4:80:da:56:b0:8d:a9:82:ca:5c:cd:52:03:e8:3a:8a:9e:1a:
be:e3:af:2f:36:d4:2b:ff:95:68:18:6e:6b:a6:b3:bd:c1:c7:
4a:57:73:18:92:88:12:7d:a4:4c:1a:1d:6d:6a:a8:9b:a4:3b:
70:7a:ea:b3:3b:ae:c8:b5:80:11:a4:2b:be:af:7c:ae:f2:2d:
83:6b:d5:a7:bd:06:9a:20:ad:64:54:3d:a8:7c:3d:3e:67:03:
fb:c9:7f:5e:19:2d:3c:75:ea:e3:0a:2e:14:ae:82:72:74:61:
15:d1:14:ab:21:e8:c2:f3:36:8e:ce:6e:7e:21:1a:13:33:3d:
99:4c:bc:de:e4:1f:ed:35:16:c9:58:f3:54:f4:fe:e5:2a:c2:
2e:a2:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:41:50 2025 by rpki-client