Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: RiYeEovNmIre5ISjGRI4MDEA1iLotvBR3g/uNkcNFos=
Subject key identifier: C0:BF:35:BA:E7:73:8A:C0:2B:D5:ED:27:8C:D4:A1:AA:24:2E:75:A7
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0197BB8FF8CD191DD1D6A510CD429E4D5A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 11B0
Signing time: Sun 29 Jun 2025 12:01:04 +0000
Manifest this update: Sun 29 Jun 2025 12:01:04 +0000
Manifest next update: Mon 30 Jun 2025 12:01:04 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: OoBCilzkI+mmT9rx4Qt/yj+/GzkqDzjKMlv0DT5oVkw=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:8f:f8:cd:19:1d:d1:d6:a5:10:cd:42:9e:4d:5a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jun 29 12:01:04 2025 GMT
Not After : Jun 30 12:01:04 2025 GMT
Subject: CN=c0bf35bae7738ac02bd5ed278cd4a1aa242e75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:2c:4a:ac:10:4d:4f:7a:e1:7c:e5:f7:aa:
e0:e9:9d:bf:55:27:8c:4c:fa:04:3e:c0:c6:00:dd:
eb:dd:fb:52:86:4b:6b:6a:24:b6:ee:f6:b7:01:16:
79:e6:d7:9f:01:e5:76:57:e3:05:7d:85:fe:e2:4d:
9d:91:5d:60:af:4d:95:8a:19:fe:d8:f9:c2:e6:19:
e1:56:58:22:16:b7:fd:2c:c0:5d:24:7f:5f:72:c8:
f0:f5:89:f2:f6:51:7f:e4:07:d0:fb:af:e6:cc:59:
d7:2b:e8:f3:6e:7a:13:7f:41:45:2b:42:d7:32:b9:
2b:2b:d2:c8:ee:69:da:90:26:da:3d:89:e3:60:70:
7a:e9:9c:f9:73:9a:f5:a8:79:4e:d6:c7:ec:04:24:
54:55:fb:c2:3b:3d:4e:80:9d:4a:0d:e3:51:2d:eb:
22:5c:a2:b3:43:80:1e:7c:36:5c:d7:bb:db:ef:40:
48:6f:2e:b1:38:0e:8b:7e:a6:94:d8:2d:ea:84:53:
ad:cd:7d:2b:12:47:45:76:fe:2c:f3:41:4a:2d:a6:
6c:a3:8e:69:34:7a:8b:da:cf:27:a1:a6:c7:ba:cb:
d8:6e:df:76:3d:8c:42:59:c6:e9:2f:f2:30:21:1a:
75:26:3e:56:bf:1e:89:65:dd:66:1e:b7:5b:11:3a:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:35:BA:E7:73:8A:C0:2B:D5:ED:27:8C:D4:A1:AA:24:2E:75:A7
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1e:90:ab:ee:8e:3c:89:a8:a6:c7:60:f6:b2:ef:05:69:dc:
4d:31:26:3d:76:b9:75:c4:2f:b7:5c:58:f2:fa:5c:c5:8c:85:
cb:0d:c5:9c:af:be:86:35:eb:b6:34:7b:6f:b5:3b:84:70:e4:
05:e4:40:b3:41:5f:74:fc:1a:ba:aa:4e:cf:20:de:95:db:21:
4d:1d:28:20:15:52:f6:e2:b1:70:a7:b9:1e:c9:f5:4d:f7:a0:
f7:31:01:72:ff:b4:65:91:3a:52:94:f0:85:6e:55:d3:05:ec:
bf:93:7a:24:53:57:99:b1:ac:6c:e0:66:d6:e6:d4:5a:e2:b0:
a2:73:bb:ef:78:7e:3e:9f:66:9c:11:67:8a:92:ec:eb:b2:49:
2e:52:15:dc:47:dc:a7:61:1a:9d:c9:70:26:a0:e8:b1:3c:17:
b3:12:f0:52:2e:90:9e:d0:b0:2a:1f:b8:d3:b5:62:8b:78:4a:
88:6e:0e:ed:4a:ef:44:b7:f0:84:9e:3a:c1:a8:ae:13:8d:17:
f1:0f:4c:1c:08:43:56:03:00:57:a0:5e:f2:30:18:3f:77:17:
69:a1:6e:1c:12:70:3a:a8:8e:d6:af:38:9f:23:14:4b:cc:f8:
7c:3e:79:22:ee:5a:cc:0c:aa:0b:d6:6d:12:0d:00:62:e5:33:
a7:80:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:07 2025 by rpki-client