Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: SSfhXfOwrGIItnLhAOiwQ6fMMlNwA2eGyU6L5u1RvTg=
Subject key identifier: 4D:FA:EE:8F:19:28:EA:2B:40:D6:F1:EB:78:18:0C:B0:34:14:D0:03
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 01974EC50427960E9063BA521F92C678F621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0C76
Signing time: Sun 08 Jun 2025 09:00:23 +0000
Manifest this update: Sun 08 Jun 2025 09:00:23 +0000
Manifest next update: Mon 09 Jun 2025 09:00:23 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: kyPCIrX3PM6YJPGd/VE382tq46leK4wt7giZMoG8wCU=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:04:27:96:0e:90:63:ba:52:1f:92:c6:78:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jun 8 09:00:23 2025 GMT
Not After : Jun 9 09:00:23 2025 GMT
Subject: CN=4dfaee8f1928ea2b40d6f1eb78180cb03414d003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:f9:ce:93:83:a5:a7:57:0f:31:c1:8e:22:
ff:60:f4:5e:88:0f:96:df:ba:d3:55:0c:32:37:0a:
17:19:f9:a1:09:5c:4e:5e:78:74:08:ed:6f:75:d4:
99:a6:8e:3a:43:a2:4d:00:30:45:08:14:07:5e:a7:
a8:20:16:85:9b:38:9f:19:d1:82:1f:af:6a:84:87:
75:f9:cc:e2:ce:85:18:44:d5:19:df:d7:f3:4d:48:
a9:08:4b:0a:4e:08:69:ad:58:80:c7:6b:d4:b2:47:
fb:5d:f7:53:b3:a7:be:42:98:56:c1:58:d1:23:d0:
e5:9e:d3:be:be:47:59:6a:6d:58:8e:b4:fd:76:fd:
8a:65:15:0f:6a:9c:06:f1:aa:6a:fa:f7:24:79:a1:
a2:59:14:f3:c7:ca:4a:1f:2f:47:80:d5:1e:e8:2f:
7f:0b:3d:c2:91:71:2d:07:f2:91:a4:36:54:f4:b7:
a4:be:61:79:40:20:72:1f:16:05:04:d7:c6:f5:dc:
f1:9e:b5:89:78:4b:8f:a2:72:35:16:02:30:16:0d:
4b:22:20:e6:a7:35:fb:39:63:b4:22:39:2b:d6:ae:
9f:11:3f:54:d2:4c:62:c9:a6:5a:c1:44:bf:f7:e3:
15:d9:3e:39:3d:72:e6:0e:21:bc:24:54:89:bc:1f:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:EE:8F:19:28:EA:2B:40:D6:F1:EB:78:18:0C:B0:34:14:D0:03
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a3:ec:53:65:e9:77:48:89:37:f0:4e:13:7d:95:45:c9:9b:
98:f9:6d:39:00:3a:24:ca:75:30:ce:67:8d:e4:ba:4d:be:4d:
79:0c:39:06:30:fd:5d:07:b3:2b:e9:78:ba:77:78:8b:f4:63:
3e:42:31:1e:65:b5:e8:94:ae:6d:60:62:58:5c:0e:8c:a9:1f:
86:c6:d0:f6:a7:33:f7:75:37:1b:1a:74:d9:dd:59:a7:5d:2f:
c3:97:a9:90:da:1b:15:a0:3d:38:43:00:1d:f9:7d:8f:1a:e6:
f6:51:5e:05:78:e0:40:62:73:b3:15:46:77:08:35:f9:7f:27:
e6:31:d6:0a:43:57:a1:b2:bc:c2:28:fa:18:63:46:92:1e:5e:
26:b3:df:36:2a:a6:ca:be:1b:45:74:bf:25:8d:37:bf:be:87:
89:64:2a:5e:b9:8d:35:f0:95:a5:e0:b5:4e:4d:f5:23:cd:67:
cd:5c:ca:c3:de:31:fa:0d:f2:b1:90:db:4d:57:b1:c5:17:11:
31:8f:ea:9f:c6:aa:57:e3:85:d3:b5:98:72:cc:56:a4:81:a3:
fc:58:a3:4f:d1:99:75:09:f7:7e:55:22:bd:ab:21:31:00:24:
1e:41:72:31:17:0e:2d:9e:e1:70:c6:a7:4a:7b:00:3e:95:c1:
cb:01:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:09 2025 by rpki-client