Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: 0hthqPMHLXdwCDoSmToeLfwMBn9wsMlkZFNLXSEHWOI=
Subject key identifier: A2:40:0A:4C:45:19:27:3E:70:7C:F8:DE:4E:49:86:9E:2A:85:80:E1
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019749D5B2BBA448E39D0B94A6B6159DA9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 10:00:30 +0000
Manifest this update: Sat 07 Jun 2025 10:00:30 +0000
Manifest next update: Sun 08 Jun 2025 10:00:30 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: r0Mw7ZymaYfAq2gPAkaocC8hYJzHyO/+Og37wX6y++s=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b2:bb:a4:48:e3:9d:0b:94:a6:b6:15:9d:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jun 7 10:00:30 2025 GMT
Not After : Jun 8 10:00:30 2025 GMT
Subject: CN=a2400a4c4519273e707cf8de4e49869e2a8580e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:d2:96:83:8a:85:39:02:e3:5b:55:ed:fb:
1c:59:e3:ea:41:a8:cb:4f:49:03:a3:4b:eb:f2:62:
7c:e3:1a:aa:a7:54:5a:af:b8:96:6d:5e:05:d7:9d:
52:a8:af:5d:7e:91:5f:52:55:b4:21:ce:87:77:ea:
09:49:8f:29:8f:0b:8b:0b:50:85:71:7c:fa:26:e6:
20:13:0d:0e:98:ee:56:32:04:88:5f:54:8e:14:ca:
90:ca:b4:53:a7:32:ce:d5:46:d8:5b:8a:f9:af:52:
24:19:33:8f:63:a3:0a:9e:db:45:b1:3f:57:c8:ee:
48:36:83:e5:12:c0:85:2e:f1:f2:2f:78:00:c6:1b:
46:1d:6a:71:45:93:57:3b:b6:4f:77:51:7d:8c:14:
90:8b:31:55:23:0d:64:38:2b:3f:1f:ca:4d:b9:45:
47:ba:fd:9a:28:49:53:a4:84:98:84:ca:0d:12:4a:
05:f2:54:48:63:43:06:0f:45:58:22:66:71:6f:26:
3b:0c:46:b6:ee:41:3f:1b:7f:7a:3e:19:36:e1:c9:
8c:7f:ab:66:4e:4e:ee:8e:ec:5f:2a:96:cd:dd:60:
91:15:f3:6b:d6:8c:d3:87:44:8c:08:da:9e:ad:70:
1c:05:fd:5c:73:40:f3:af:a1:ad:4d:af:5f:e0:39:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:0A:4C:45:19:27:3E:70:7C:F8:DE:4E:49:86:9E:2A:85:80:E1
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fb:b3:ab:b9:f4:3e:dc:b5:50:c5:87:56:f8:ff:98:88:fc:
eb:68:06:c0:0b:76:9c:c2:94:67:47:cd:e6:ba:d7:3c:e5:af:
35:19:3e:cb:bf:5b:0a:5d:e7:a3:69:d4:bb:ae:06:a0:ba:85:
c7:8d:c1:93:94:cb:0c:8d:2a:dd:8f:32:b2:84:4e:a4:5f:a5:
70:bf:ae:bd:1b:3c:d6:ad:ad:cd:cc:01:91:dd:6d:55:73:ac:
c5:28:d2:21:da:8a:53:70:9e:8c:9b:90:3a:f9:c2:83:36:f9:
ca:f5:03:9f:bf:f0:da:0c:c7:75:0d:c4:04:e2:79:d5:8b:09:
2c:f3:bf:9d:3b:be:37:5b:41:f3:9d:ae:41:78:9c:38:ad:03:
96:7b:3b:d5:8c:c3:71:f3:2c:7c:8f:f8:f6:a6:26:1f:1c:ea:
d3:4f:47:76:8a:08:c0:f1:4a:58:0d:d3:c2:4d:f1:24:b3:08:
f7:35:16:e4:c8:bb:8a:b3:85:41:e4:d5:d4:d0:a8:05:26:d9:
ee:ab:74:0e:95:6b:a6:c0:13:63:4f:f7:f4:a2:53:58:ef:4f:
9a:23:0d:c2:32:de:ed:18:51:ac:dc:39:5b:81:bb:fd:03:fb:
ac:74:69:a3:b0:e0:32:4e:10:df:c5:db:31:99:c9:9d:fa:e1:
ba:c7:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:10 2025 by rpki-client