
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: dvU9Qil8ShpJ960Uhkqvz0O08Oa7QqJh7c0xTa0rKFY=
Subject key identifier: 26:C5:8D:17:B3:F2:CE:BD:FA:40:35:85:FA:71:5F:D7:8E:EA:DE:41
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 01975234B7D5BE2CC5FBEBFFC2B80CD38A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 0194
Signing time: Mon 09 Jun 2025 01:01:15 +0000
Manifest this update: Mon 09 Jun 2025 01:01:15 +0000
Manifest next update: Tue 10 Jun 2025 01:01:15 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 0rroBUoNQmeWLN76LN70NdxiADGrvpm0EaTMDYyzT+E=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:b7:d5:be:2c:c5:fb:eb:ff:c2:b8:0c:d3:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jun 9 01:01:15 2025 GMT
Not After : Jun 10 01:01:15 2025 GMT
Subject: CN=26c58d17b3f2cebdfa403585fa715fd78eeade41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:97:e0:20:ba:24:41:8d:f9:03:42:a1:1c:
4b:13:e7:ee:21:8e:22:cc:6b:75:18:16:a6:65:61:
f5:c0:74:61:a7:32:a5:72:19:da:9c:a0:5b:33:50:
ef:12:7d:b3:c4:4a:2d:81:d9:6d:53:71:a3:f6:05:
30:d1:e6:22:1b:4e:fe:47:24:28:e1:a3:7e:0b:bf:
8b:48:f1:45:94:3a:99:23:49:bc:0d:b3:db:49:d9:
a2:19:a9:93:e4:06:b2:24:13:9b:47:44:3c:29:fa:
be:0c:26:97:f0:0e:bf:2a:60:ec:2b:6e:84:2e:0c:
b3:62:4c:6f:5d:f0:49:31:81:60:b3:5c:d1:b3:2b:
51:94:96:18:f5:68:15:a2:5e:af:6a:26:c5:b1:59:
e5:3a:ea:03:32:df:b6:62:3b:2e:7f:7e:8d:b4:ec:
ce:cc:b3:b8:9c:f2:14:8d:c9:78:c2:99:dc:4d:52:
44:c4:6b:46:3a:bd:19:5a:a1:37:9f:c7:7e:dd:c0:
65:af:5a:7b:98:aa:88:dd:c5:6a:c6:d7:e6:88:2f:
48:67:5d:0c:b5:04:ca:8f:a6:6f:19:87:d6:7d:be:
d1:34:5b:9c:45:b7:49:88:18:87:77:ae:e4:72:b5:
fc:f5:26:96:e2:05:cc:57:bb:60:fc:5b:fb:29:af:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:8D:17:B3:F2:CE:BD:FA:40:35:85:FA:71:5F:D7:8E:EA:DE:41
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:67:85:68:b7:c9:49:42:cf:f7:86:00:ae:ca:ff:2a:72:
5e:37:19:64:b1:78:db:2c:21:36:63:74:a2:51:fd:b1:fa:8d:
d4:8e:6b:5f:81:81:93:df:fe:94:ec:88:68:fb:29:9d:74:2d:
2f:13:9e:07:55:eb:28:26:5d:f7:f0:d0:31:a2:6e:36:96:70:
de:9b:19:31:b8:58:26:68:b2:6e:93:36:74:e9:ee:aa:7b:72:
74:9a:74:4c:b9:74:69:bb:22:f8:71:4e:6e:c8:6a:a9:77:71:
d8:c4:e7:99:77:4e:3f:b8:cd:09:86:dc:9c:10:14:85:eb:18:
41:19:c5:29:99:8f:b8:0b:99:bb:f0:df:94:eb:7e:c7:04:fe:
83:56:32:81:99:5d:b5:f3:03:d5:f1:af:09:c4:16:fa:37:a9:
8f:99:51:54:b8:6b:b7:6d:42:6e:6b:3b:e7:28:3a:ca:d2:75:
b4:f1:10:e9:7a:75:25:1d:37:2d:a7:5d:ce:74:54:0f:f0:92:
44:e6:80:b4:19:3e:2c:ee:e6:96:c7:c1:fc:87:2c:98:ad:1e:
2f:e2:c3:ea:00:27:b8:6c:96:8e:4d:2a:b6:f6:cf:f0:9b:e3:
d5:b1:84:17:c3:32:e9:77:a2:97:38:00:7a:f0:09:fc:1b:9f:
ac:f2:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:47 2025 by rpki-client