Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: 5XjrJRxvLIwVwvn99ckr7DwNIrTWREG59bN5SwbPLX0=
Subject key identifier: 26:0A:AB:82:B4:85:59:17:C4:10:32:AA:9B:E6:F5:25:64:42:12:9C
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 0197B7EA83ABFD37342E86842752156ACA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0A26
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: IIUXVqU0F7xwycIZrJHaWDUn4J3i2ekZxzmc3FdOQFE=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:ab:fd:37:34:2e:86:84:27:52:15:6a:ca:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=260aab82b4855917c41032aa9be6f5256442129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:e8:df:c6:14:9c:de:a0:f2:41:a3:ae:3a:
84:51:ab:3b:f0:ee:ee:97:86:16:df:ae:90:29:a2:
f2:ad:91:a2:7a:09:a5:af:41:29:99:22:50:7c:b7:
87:59:d5:f5:26:22:e3:9e:35:cc:85:be:46:9e:73:
8c:f0:af:b6:c6:14:96:9b:91:3b:82:3c:5e:47:9c:
a1:80:ff:2e:18:f7:cb:79:d7:2d:e9:71:b5:fc:30:
50:63:a4:8c:f0:72:65:ae:0a:a0:e1:07:34:b9:d0:
8a:d8:e8:d5:49:5d:1d:63:51:49:3c:fc:00:ef:39:
cc:1d:1a:8d:66:7d:8c:35:b9:88:52:37:4c:25:3c:
9e:5d:cc:17:54:d5:ca:cc:53:fe:fe:c5:fe:bb:ea:
69:ff:31:17:68:56:7c:f1:9f:70:a7:45:9b:24:af:
59:1e:a4:b7:61:a2:5e:10:35:42:23:44:b9:d8:82:
fe:cb:3a:01:df:00:37:00:a2:7d:76:c1:db:fa:1d:
b2:c3:38:53:8d:f8:66:cc:f0:9d:08:70:c8:f3:84:
8d:14:49:89:fa:f5:06:f8:8c:16:ec:f2:1b:5d:cb:
37:21:a1:55:c3:cb:90:d3:0d:aa:e1:a3:55:ca:d0:
be:37:dd:c3:08:3d:8c:fa:e6:fa:da:5e:5f:b6:49:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:AB:82:B4:85:59:17:C4:10:32:AA:9B:E6:F5:25:64:42:12:9C
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d2:5f:70:2c:79:dc:be:8a:e3:bd:3c:d9:45:b8:26:1c:dc:
08:97:27:1a:46:a1:ab:64:a2:a4:7d:26:6f:68:44:2e:6c:45:
92:9e:d6:ac:d7:f7:83:6c:f8:04:5c:77:8a:23:53:6a:f1:65:
b8:f3:db:d0:8d:db:e1:d8:0c:e9:26:b1:64:95:cf:78:e9:ba:
09:cb:ea:be:3f:2d:8a:bf:22:fb:4a:8d:3c:ac:4b:bb:0d:c6:
cf:dd:9d:97:9d:0b:bd:9a:f6:6e:6c:0a:72:ee:f4:97:e4:29:
e6:15:98:1c:20:00:09:34:31:f9:e2:6b:dc:06:48:f6:dd:57:
11:dd:63:61:cf:80:b5:51:ad:4e:4e:06:3f:98:35:e8:7c:de:
22:d0:6f:12:02:be:03:d9:9c:cb:51:00:b9:c5:fd:f3:7c:cb:
88:0f:ac:8c:c0:e9:88:84:3a:a6:82:02:e6:9c:5a:37:b1:8e:
e9:a0:ee:ff:e7:ba:9a:5f:f3:61:1e:1b:df:63:50:33:73:f8:
12:c4:c9:fa:f7:56:1f:e1:61:a7:1b:dd:b8:ec:ef:91:c3:7f:
b9:ad:27:4d:7f:51:51:8b:4b:1d:5d:d4:6f:50:82:6d:3e:e1:
eb:21:18:bd:9f:b7:fe:c0:4b:5e:2e:6d:15:cf:65:0a:b4:1a:
8e:80:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:27 2025 by rpki-client