
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: fm0J/R9tneGyjOEOLhxAMtXXh75nv217yQWUGLO+wGY=
Subject key identifier: A7:A9:02:82:53:77:7F:C3:B7:BB:C1:50:61:EF:F1:44:95:CC:7C:0D
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 01975422E5C43B79E18A4E8B44556F681F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 10:01:02 +0000
Manifest this update: Mon 09 Jun 2025 10:01:02 +0000
Manifest next update: Tue 10 Jun 2025 10:01:02 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: k8lOsO1UZJZu4miY2FTe27Rhm46Z2uTbQFl4M3nJvPk=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:e5:c4:3b:79:e1:8a:4e:8b:44:55:6f:68:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Jun 9 10:01:02 2025 GMT
Not After : Jun 10 10:01:02 2025 GMT
Subject: CN=a7a9028253777fc3b7bbc15061eff14495cc7c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:7a:82:64:5b:07:78:08:37:2a:41:26:a9:
3f:e6:18:51:54:11:c1:1b:ee:85:df:01:90:df:65:
0a:17:ae:ae:61:d1:f0:99:6e:00:11:37:30:a3:65:
72:ec:26:6c:71:a7:f4:c9:9f:ac:b6:76:89:12:66:
6b:58:a8:f8:ee:ed:48:79:04:0d:f3:a0:78:bc:26:
e4:8f:da:7d:05:98:1b:4c:f7:5c:42:d2:45:b6:f3:
5e:75:cb:57:18:46:6d:28:f6:3c:0c:f3:14:92:88:
3b:ea:3f:1d:e5:9d:df:0a:28:01:1e:4f:f7:06:b2:
eb:f4:40:78:cd:a1:4f:3a:69:af:4b:bf:f6:25:61:
73:95:33:04:db:02:c6:00:ec:2c:00:32:be:0b:fa:
a2:cf:ae:67:cd:f2:67:27:6c:10:23:9b:b1:d3:d3:
d7:d4:f7:cd:85:ea:a6:fc:82:31:9c:94:a6:f9:f4:
bb:46:68:17:64:f5:57:17:1f:e0:19:e8:4c:ff:30:
84:7c:64:0c:6d:38:22:b8:7e:07:a6:5c:b6:eb:1f:
70:31:2f:a2:1e:b5:5d:53:1c:8d:f8:66:44:f3:34:
e8:73:3a:e6:21:69:57:43:57:d7:5d:2b:7f:9b:84:
18:4b:8e:c1:8d:6b:b0:e2:e0:e7:78:aa:33:5b:ad:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:02:82:53:77:7F:C3:B7:BB:C1:50:61:EF:F1:44:95:CC:7C:0D
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bc:37:90:56:8d:fe:a5:78:93:4c:b0:27:e4:18:e7:cd:1e:
2e:fc:fa:da:8d:71:08:bc:5d:bf:e8:d9:d9:fd:9f:e8:94:3f:
60:e1:7c:9a:94:ce:24:64:cd:07:d5:26:8a:60:a7:c1:90:b7:
ca:1e:55:a7:a1:2d:49:fb:85:ef:a5:2e:09:9b:d3:6b:68:62:
20:6f:40:9f:dd:6a:9d:fe:58:5c:ae:c7:0e:8c:86:44:0f:4f:
c7:0c:73:49:92:c8:44:c1:f8:50:6f:b9:e3:78:3b:23:c6:63:
43:9e:b4:b8:24:97:42:7b:3d:86:f8:40:63:9c:42:40:78:02:
6c:c4:8c:70:a8:d3:f4:13:e5:db:a8:ab:e6:a0:cd:ef:b0:f2:
fb:86:11:3f:e0:b7:04:76:fc:00:c3:5a:02:fa:a5:3f:21:e4:
32:31:7a:3d:76:80:73:0e:55:9b:1f:bd:c8:f7:f6:13:bc:ea:
05:38:a9:ce:e4:69:da:21:04:69:ae:d7:bc:3a:18:9e:d1:16:
1c:c6:88:aa:c6:c1:9b:77:d5:d4:dd:fa:c5:a8:9a:2d:19:60:
d1:70:23:34:c4:85:55:4e:24:81:6f:6b:73:33:43:07:02:38:
7c:7d:23:cc:fb:54:1e:44:f0:5c:b9:3e:36:ba:ef:b5:22:da:
40:de:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:14:29 2025 by rpki-client