Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: e6Jk0o7Ms1zZIOlUUNlEXNMs9RTesC/f7n6sIwRgyqc=
Subject key identifier: F1:73:FF:FC:45:2D:9D:8C:2C:D3:81:BC:05:5B:47:17:64:EA:F5:47
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0197B6D7861A416FC7B442A803BA4BA0B3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 04E2
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: pKwlyigYjWlwyXDQOw7deLzYpAWUqpVC+FMONJC/BfA=)
2: cSDgENBFff7SMicA5wSq_jA-MRY.roa (hash: L5827Cx/Cn25nVJdb2F1jPimmzkM2ZE/4b/2pEQB2wk=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:86:1a:41:6f:c7:b4:42:a8:03:ba:4b:a0:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=f173fffc452d9d8c2cd381bc055b471764eaf547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:66:cb:78:d1:df:87:ce:df:89:04:91:b6:
1e:cf:ff:5f:42:56:57:e5:4e:9d:a9:49:d8:36:4d:
9e:ee:61:1c:a3:f1:50:ec:a9:cd:bd:28:60:09:7e:
59:f3:06:74:27:9c:a5:31:18:c0:f2:c1:84:57:7e:
47:69:ba:be:eb:a9:de:cf:46:c2:97:ff:f1:63:19:
fd:2d:9c:ce:7e:44:37:7d:34:50:c2:58:59:e8:38:
4d:18:f4:c5:ca:c9:48:4f:4e:67:99:d8:4e:d1:ae:
30:bf:f1:9c:27:6b:18:2a:db:df:81:af:92:2c:83:
64:71:a6:03:56:1c:3e:b2:44:9f:78:a4:9d:af:4c:
b9:d2:0a:52:54:95:56:cc:5b:5a:f7:7a:63:53:eb:
6a:be:56:39:3c:11:17:41:25:25:c3:12:1c:8a:46:
c7:eb:35:6e:e1:a0:d8:06:24:2a:b4:9f:9a:a4:58:
03:ef:84:ca:39:ea:60:f1:8b:12:bf:49:93:06:5e:
e7:58:2a:4d:8a:54:cc:8a:78:19:84:1b:f6:39:2a:
5b:47:57:11:f9:ef:04:9d:20:3e:54:60:bf:53:0d:
5e:67:d8:76:eb:4a:f6:49:aa:d2:5c:6e:2f:e4:9c:
70:e8:02:d8:e6:2e:a8:e4:58:d7:44:f0:f8:bf:16:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:FF:FC:45:2D:9D:8C:2C:D3:81:BC:05:5B:47:17:64:EA:F5:47
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:f8:2b:6b:fa:d7:f7:c6:68:55:9f:33:92:fb:c8:77:02:
58:80:a8:6d:3e:39:e5:b7:4e:b6:4c:0b:a9:c7:6b:06:14:83:
bd:d4:bb:ff:60:bb:bf:43:e6:93:6e:ff:83:13:20:3b:22:29:
bd:8c:a9:44:d2:85:97:88:23:39:56:da:77:6f:c8:44:e8:cd:
4e:92:e2:45:e2:3a:c8:05:7d:b9:9a:d5:20:0d:ac:92:d3:4b:
e8:6a:73:4a:05:00:4d:2f:dc:6e:d3:72:7c:e8:1a:9d:67:93:
20:f6:b4:f9:7a:88:8a:1d:6f:56:17:99:0c:3f:e6:b1:66:3e:
a9:f2:8c:81:e8:e0:6d:4b:11:2d:ec:b1:d1:3d:7f:44:f9:15:
33:c3:c8:de:32:00:89:ab:24:61:eb:08:ae:19:19:00:b2:d5:
9b:e4:f9:3e:89:93:e3:c3:ca:3a:03:1e:eb:a8:e2:ee:0b:98:
64:5c:10:cb:84:f4:90:2a:ed:e2:f6:c6:79:97:56:2a:f6:f7:
f2:49:71:63:78:5c:57:95:b6:e5:9b:78:65:3b:b6:ac:ce:eb:
f3:83:54:3e:08:39:be:d7:fa:78:d2:d5:28:42:bd:47:e8:ee:
87:30:c9:b8:be:39:5f:f8:24:1f:1e:5d:5e:20:2d:8f:e6:7e:
cf:f1:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:21 2025 by rpki-client