Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: kCCoR/pZUO8tcl/+8z9Pj6BXYgH4E6mx3O0ns9k6WXU=
Subject key identifier: 42:30:A8:BB:6F:46:FE:D5:88:3D:DA:5B:08:B2:7E:3A:D6:88:B1:BD
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 0197C07F6D780EF0187A21AAC927B1C749BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 0223
Signing time: Mon 30 Jun 2025 11:01:05 +0000
Manifest this update: Mon 30 Jun 2025 11:01:05 +0000
Manifest next update: Tue 01 Jul 2025 11:01:05 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: y6npM+MRkw813UD+5ADnVy3h6YbCoOMnKwM5Kv93pNY=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:6d:78:0e:f0:18:7a:21:aa:c9:27:b1:c7:49:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Jun 30 11:01:05 2025 GMT
Not After : Jul 1 11:01:05 2025 GMT
Subject: CN=4230a8bb6f46fed5883dda5b08b27e3ad688b1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:20:5b:25:d2:62:9e:27:8f:36:2c:fc:97:
0b:55:10:36:c7:6c:3a:5c:93:ae:a2:ac:8e:a6:d0:
84:a4:af:0e:b9:cb:9a:ce:bc:b7:74:71:20:d0:99:
e9:d9:a7:e3:41:a0:c2:82:c2:04:dd:70:e2:83:6b:
cd:0c:61:81:80:e3:01:67:fe:92:b3:77:7f:be:93:
4d:eb:94:1d:c8:b8:69:10:cb:c9:44:84:91:c2:ba:
4e:18:f0:9b:73:23:4e:78:9f:50:6b:20:73:b3:e8:
f7:40:ea:a2:bd:45:9e:b8:82:38:9f:a4:5b:39:7a:
c9:8c:5a:67:9e:5f:3b:5d:03:c3:05:14:53:c6:d8:
93:a4:a7:18:e9:26:74:e3:6a:43:f3:32:52:1f:97:
dc:92:29:69:87:04:4d:3f:bf:34:d2:2d:cf:8a:b1:
2a:56:55:7a:21:0d:45:2c:c3:2e:5e:da:be:9e:3c:
66:27:92:2d:46:24:76:97:7b:75:47:ae:35:c5:01:
1a:53:97:aa:86:7e:8b:22:3a:7b:bd:22:60:ce:5f:
58:02:67:be:fb:b1:d2:98:ea:47:80:7f:1a:d6:0a:
4f:a4:ba:fb:91:d9:7c:75:72:9c:46:42:b3:46:4d:
3e:c5:10:75:e4:bb:d2:92:0e:1b:d7:8a:4b:d5:21:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:A8:BB:6F:46:FE:D5:88:3D:DA:5B:08:B2:7E:3A:D6:88:B1:BD
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:f0:ba:c3:f4:df:5e:bb:8a:9f:d8:40:71:2a:25:0a:07:
9c:eb:29:b9:99:ef:08:b0:e0:08:af:cb:b4:08:54:08:a6:f2:
7f:75:6b:d8:9c:fe:3b:ab:14:04:bb:b1:03:1b:9b:d9:78:f5:
0d:a4:6a:0a:92:36:90:c3:90:80:30:c3:db:a7:f9:63:ee:e8:
8c:0a:a1:0e:01:ac:ee:eb:52:9a:dc:60:68:16:9a:50:30:3e:
03:4a:91:9c:c6:32:35:f8:77:31:83:ef:d0:17:51:3a:a3:71:
7d:68:c0:c4:f3:23:82:e2:2e:e5:80:a1:83:47:64:9a:63:e8:
33:2e:e0:87:bf:b3:11:4e:aa:1c:c2:88:96:f4:45:5b:c0:11:
46:81:2f:e4:07:74:78:3b:0c:98:0a:93:c3:3e:7f:dd:4b:11:
02:9c:69:37:e0:ab:a2:86:04:29:36:0f:55:76:ee:20:c6:9f:
7f:a2:bc:06:e4:27:8e:da:eb:1f:f6:04:57:05:69:e0:3c:5b:
bc:f3:ff:0c:e6:e2:17:02:72:d3:13:41:de:cf:85:e8:35:ba:
af:a4:59:31:2e:15:bf:f0:4e:5a:6b:db:59:04:8f:3a:4d:29:
c4:73:45:39:99:82:6d:ab:0d:9f:a8:04:da:87:47:5d:35:1c:
23:e2:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:47 2025 by rpki-client