Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: q1vPu//S3je7iwSk3VhsVUinTeciFTnc7QZpIp1CiRw=
Subject key identifier: 02:AB:FB:57:AE:FB:14:8F:BD:33:A3:89:48:25:44:0B:4F:D8:89:A6
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019763CC937AABA0E29B4D192497CB23C2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 11:00:40 +0000
Manifest this update: Thu 12 Jun 2025 11:00:40 +0000
Manifest next update: Fri 13 Jun 2025 11:00:40 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: DJgGIee+Qzj13XtstV2ZTWNvP2ve+06haZGqkVGUleE=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:93:7a:ab:a0:e2:9b:4d:19:24:97:cb:23:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 12 11:00:40 2025 GMT
Not After : Jun 13 11:00:40 2025 GMT
Subject: CN=02abfb57aefb148fbd33a3894825440b4fd889a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:4a:64:ef:fe:9d:25:6d:4b:74:9b:d7:33:
79:7c:0d:f5:21:98:c6:ab:1f:82:44:04:f4:9c:2a:
af:d2:0b:fb:f0:d4:ec:6a:b3:6e:9f:1b:19:02:a6:
b5:ec:6e:f7:3c:4d:d2:14:2a:0f:56:95:22:d5:1d:
02:68:20:17:00:8f:4c:29:19:14:7e:3b:19:95:53:
5a:c4:ed:5d:ff:25:c1:66:fc:8f:ae:0c:81:6a:e0:
23:98:ea:25:8b:5d:5a:5d:60:a3:48:e1:9d:3e:c2:
85:4d:1d:5c:82:7e:ba:0b:a6:56:e1:a0:a5:c9:ec:
b7:76:0c:e5:b9:3a:45:fe:6d:e7:c0:71:40:2e:0b:
29:35:35:52:12:ce:ab:4d:5a:cb:a5:99:ba:89:88:
0e:9c:14:52:df:6f:b7:8d:7c:88:2c:23:15:4e:2d:
25:4a:2e:53:2e:24:61:e7:cf:84:f9:4e:1d:77:58:
9c:64:8c:30:ed:38:cd:8e:de:69:3f:80:1e:82:de:
3f:be:4e:be:b6:e0:f5:a4:db:5c:e4:ba:0e:f8:40:
87:b5:ff:c9:76:e6:51:19:07:1c:82:f8:36:6d:4b:
1d:88:27:c4:98:fc:f4:d3:dd:66:48:dc:14:50:a7:
da:6b:05:29:4d:aa:5a:61:f6:0b:f2:43:be:7f:7b:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:FB:57:AE:FB:14:8F:BD:33:A3:89:48:25:44:0B:4F:D8:89:A6
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:eb:a9:2f:b6:56:80:1c:9e:d7:e8:49:ad:ba:f0:96:c7:db:
a4:50:e0:d2:c2:ce:54:a9:64:2f:80:78:b5:e8:b3:57:b6:27:
ac:bf:dc:90:57:ac:92:c4:9c:58:9e:46:c2:27:00:ce:c5:1c:
01:d8:d7:6e:1d:d0:0a:df:d6:43:fc:5c:3a:03:cd:9b:be:0b:
3b:97:60:93:6a:3e:12:88:0b:3c:54:e5:fe:4a:73:dd:15:2c:
3d:6f:f0:3d:5c:51:11:db:cf:9c:9c:bc:8c:2b:15:dc:9e:46:
54:06:77:a7:4a:20:57:bb:44:c6:9e:d3:df:5b:c4:ac:25:96:
19:52:31:3f:4c:5f:36:8f:05:d8:21:b0:1d:f2:a9:e6:26:94:
ce:05:88:d7:c2:1f:3c:80:b2:94:f2:09:d2:1b:82:5d:e7:67:
e7:86:b2:06:4c:9c:6e:50:de:60:60:db:5c:c7:09:9f:bc:f5:
9d:1f:62:1c:c2:b9:39:28:e2:a2:ea:a9:11:b9:dd:ec:a6:49:
0e:3b:9d:b1:1e:ea:d4:a9:e7:e9:7a:8b:68:68:ce:74:6a:34:
98:5d:dc:39:3a:0f:c2:62:a4:61:86:df:36:fd:d0:c0:2c:ca:
3d:ce:36:39:9d:49:f3:f1:7d:5d:00:fc:18:25:ae:1c:26:4b:
85:2b:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:45:34 2025 by rpki-client