Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: 0Lai+8avKDNejv2HKodWMTgzimisYR6kym8h0etv8H0=
Subject key identifier: 29:D2:6C:D6:A4:29:31:44:E2:88:6D:93:89:4A:8E:64:B4:D0:D4:F6
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 0197B8214A39E51A9A64C304E98D05715B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: puaU3efBw+65Lpa/8ppdhJG8aiKJK+IxuZGhtLbSKcY=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4a:39:e5:1a:9a:64:c3:04:e9:8d:05:71:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=29d26cd6a4293144e2886d93894a8e64b4d0d4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:74:d9:9d:64:f4:43:87:52:d1:32:6c:40:
e5:0a:94:8a:84:16:b9:b7:cf:aa:79:74:d8:7b:8e:
a1:c7:55:08:66:1f:de:94:f6:a1:38:a1:a5:b4:d6:
6a:09:bf:33:31:1f:d2:80:af:5e:67:af:50:16:09:
99:fc:71:ad:d0:d1:df:d9:07:58:83:53:1d:96:d4:
7e:4e:4f:b3:90:da:05:42:d6:00:8e:25:c3:48:fc:
3b:19:e7:54:a3:2a:36:1f:7f:67:94:b4:24:60:7d:
7c:3d:33:61:69:d4:80:43:43:cb:9c:2a:8e:b1:52:
f1:e5:d6:80:48:75:4e:25:9c:de:15:ef:36:e5:be:
8f:cb:de:0c:f0:34:0f:f7:73:a7:46:ae:89:e5:5c:
27:47:18:85:82:de:6b:b1:fc:36:23:b1:5f:1f:ce:
c3:2c:ac:4e:e6:32:f8:25:c5:c1:c1:a6:2b:08:f7:
fd:6a:e2:8e:cf:30:3c:1b:fc:91:aa:68:42:42:8a:
e2:9f:e0:55:b5:12:f7:e7:7c:a2:68:4a:4b:45:d6:
d1:01:f3:84:15:64:1c:de:b1:d4:7c:6c:f2:41:82:
76:8b:ca:bf:2a:11:50:96:da:c3:c2:16:f6:cc:3d:
c9:d4:c7:5d:a7:75:f3:de:18:3a:e7:e7:4c:6e:e6:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:6C:D6:A4:29:31:44:E2:88:6D:93:89:4A:8E:64:B4:D0:D4:F6
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:11:6a:b6:7f:da:52:55:26:a9:a6:35:4c:0a:32:7e:1f:
d9:17:e1:92:6f:57:d4:1b:65:ac:92:46:26:1b:e2:fd:fb:74:
33:66:a0:f2:41:16:89:0d:33:9e:55:00:eb:c0:82:18:d0:87:
76:0e:d5:3e:d3:05:2c:c3:cd:06:16:8b:39:1c:20:ec:35:55:
39:16:c0:66:f6:5e:d9:22:d4:8c:84:43:99:23:35:ac:ff:b9:
e5:31:c4:58:33:a3:1b:7a:b1:b5:f0:4e:ce:69:5d:93:cc:3d:
e3:ee:eb:ef:e6:83:b7:9b:0b:8a:2d:6c:e1:98:6d:c5:aa:65:
74:97:17:54:44:04:d4:fd:b3:02:98:9f:52:b1:63:a7:0e:63:
e7:6f:1c:1d:27:34:fb:28:54:63:c5:14:57:8b:b6:db:e0:c3:
32:a2:df:fc:ee:77:1e:e6:15:2b:33:2a:d7:1e:f2:6d:39:be:
2a:f0:51:6a:46:b6:fa:45:7a:8a:cb:69:a4:fd:08:99:7f:13:
88:3c:fa:07:01:2b:56:5a:3a:e5:26:7f:62:5a:77:7d:a7:c7:
0f:d1:5e:c0:23:63:6a:e7:d7:64:72:d8:b2:51:c9:b5:9d:0f:
3b:2b:2f:02:47:b3:65:30:e9:f5:9c:9b:e7:f1:cb:1b:39:16:
74:45:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:20 2025 by rpki-client