Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: TLLH8xRdHosytlXVRemrTFUwNOvpgWC9BeTNvZy52LE=
Subject key identifier: A8:B4:E1:44:49:94:15:CC:C2:0D:4F:67:15:F7:21:1A:00:C4:9B:92
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0197C3805584211BCB0796D0D810500F30A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0D8A
Signing time: Tue 01 Jul 2025 01:00:56 +0000
Manifest this update: Tue 01 Jul 2025 01:00:56 +0000
Manifest next update: Wed 02 Jul 2025 01:00:56 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: j+h2iV36ERwPPnLNQou/HtV+Ql2Tj2oRbDo6fr5A+0s=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:55:84:21:1b:cb:07:96:d0:d8:10:50:0f:30:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jul 1 01:00:56 2025 GMT
Not After : Jul 2 01:00:56 2025 GMT
Subject: CN=a8b4e144499415ccc20d4f6715f7211a00c49b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:ca:94:12:8d:83:63:88:d1:f0:7d:5e:d9:
e9:18:5a:80:22:5d:48:f4:04:73:fc:69:49:64:d1:
d1:7c:42:ab:5a:47:e9:f5:8e:c4:8f:92:63:26:73:
fd:f9:a4:85:a4:45:29:5e:57:79:d7:04:6e:e1:e9:
aa:20:2e:f9:d1:75:96:66:f8:13:da:09:36:4e:57:
a4:e6:c9:f1:d0:72:76:9c:63:9b:ef:a5:79:f3:0e:
f7:32:f6:73:84:80:02:e4:c6:a6:ed:8f:7b:67:eb:
84:d5:63:f0:3f:ba:77:e3:f5:18:bc:10:e2:7e:70:
e6:10:4b:1a:7e:c2:f9:9f:8c:ba:61:c5:82:2c:04:
13:aa:09:a3:f3:90:f5:cd:62:c9:40:fc:a4:c1:1c:
1e:45:11:5d:c5:5f:18:ce:ea:1e:a2:8a:fb:5e:4c:
d2:0c:ba:55:87:6f:14:3e:9d:d2:2f:2e:bd:1f:bc:
29:cc:bf:a0:cf:67:1f:08:0c:ae:23:42:7d:94:fd:
89:19:25:45:c6:ca:ec:e5:fa:95:ef:72:6d:7f:88:
9a:8d:87:8b:75:30:e0:b9:e9:24:2a:1f:52:40:58:
cf:9d:50:7b:f2:46:6d:9a:1c:61:b6:14:79:e2:20:
49:6e:8e:bf:6c:1d:7d:b5:8e:12:91:c8:a8:55:46:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B4:E1:44:49:94:15:CC:C2:0D:4F:67:15:F7:21:1A:00:C4:9B:92
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:73:39:f4:73:90:77:b1:1d:47:e5:db:79:1e:2a:d4:fe:
7a:f0:1f:27:13:b3:bd:fd:ee:e8:51:23:38:99:e7:01:4b:19:
b1:03:95:ff:f3:94:d3:cb:29:0b:fe:3d:17:ac:55:92:22:be:
44:82:76:14:d9:00:b7:fe:14:e0:ee:6a:64:a8:4b:59:71:8c:
e5:4d:9f:a7:3d:fb:3f:55:e2:26:44:be:22:96:10:b1:e0:0c:
13:75:e2:66:0f:ec:f6:06:df:a1:b2:cb:57:f4:46:a4:50:57:
6f:00:9b:ea:e7:b9:d1:77:2d:6a:cb:cd:14:29:b6:f9:a6:9d:
0b:aa:0f:43:90:2f:d9:57:64:d3:03:5c:a5:c0:14:ea:f7:65:
64:47:a9:fe:ae:b0:c5:04:15:25:47:08:8f:10:f9:cb:b3:5d:
29:fb:8b:63:51:61:ec:6d:32:4f:a3:3a:01:76:26:9b:4f:ab:
a9:d2:76:36:0b:fd:6e:6b:69:73:5f:b7:d5:e2:f3:24:ba:22:
ff:da:09:b7:ac:a0:54:a4:c9:5a:1e:80:16:e4:5b:4d:13:6f:
a1:0b:0a:24:9b:db:3c:23:9d:89:a0:da:e2:03:1e:5f:ed:3a:
44:40:05:f2:d2:88:aa:dd:56:a2:8f:1b:74:a8:aa:99:4e:bd:
e1:fc:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:00:13 2025 by rpki-client