Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: XPsAyUign2L1mb1zGUXfJoNGJxCwGpToDJEQE8OWxIU=
Subject key identifier: BB:14:09:1B:16:15:AC:F8:DD:7F:86:2F:08:E6:17:62:D8:6A:AA:FD
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 0197B7EAA8FCE1049B7DF0AD2E6E86360D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 026F
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: wb6ot1qCMOtdIt8F8NkM0OqNNZEFnmsOIh1tsvI92vA=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:fc:e1:04:9b:7d:f0:ad:2e:6e:86:36:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=bb14091b1615acf8dd7f862f08e61762d86aaafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:f1:50:ba:ac:f9:b6:f5:a8:04:02:fd:3e:
75:e6:9c:2e:a7:e7:7d:6c:bb:6d:45:84:24:4d:9b:
0d:8e:28:ee:7d:72:39:8a:fd:1d:5d:c1:67:32:0c:
47:bb:29:1d:2d:ec:fd:e9:f9:f0:bf:8b:bf:8e:22:
ac:58:6b:45:52:c7:73:98:ee:e4:53:e1:8c:3d:98:
b4:78:ab:03:3c:87:ea:4e:6e:f0:6d:60:33:94:ea:
eb:de:3b:9a:90:4a:37:9e:cf:b4:6f:08:de:2c:60:
77:ca:9b:6d:02:8e:ad:74:26:2a:8c:94:a0:94:2d:
cb:87:a9:25:0c:40:08:b4:00:6f:cd:09:a3:28:d9:
26:83:5c:78:04:f2:9c:bc:dd:14:54:7f:ee:8d:ee:
c5:54:75:71:21:fe:24:bc:e7:69:9b:77:a7:54:ef:
d6:f9:26:4c:6b:24:ef:23:6b:8d:1d:67:5c:41:b5:
ce:f7:1c:d3:04:a3:80:b2:65:61:30:da:31:1d:70:
13:73:25:04:22:83:9e:61:0e:87:86:7c:96:61:d9:
dc:bd:94:ad:c9:73:2e:63:39:de:b6:d7:db:67:4e:
bc:c4:71:23:25:43:79:42:2d:ce:6c:6b:9f:ef:52:
df:8d:b7:f5:ac:1a:d4:7d:1b:46:a2:98:7e:49:69:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:09:1B:16:15:AC:F8:DD:7F:86:2F:08:E6:17:62:D8:6A:AA:FD
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:a7:75:39:85:b8:39:9b:93:d0:5b:64:47:c1:d0:b4:c3:
05:99:58:3f:4f:16:e8:18:f5:d3:79:03:fa:4e:ae:20:3f:e7:
c2:b3:3b:e1:45:33:4b:6b:9a:b7:7d:3e:22:1d:75:a9:57:cc:
89:ef:ab:df:00:d0:07:93:6e:af:4a:fb:86:7a:2c:43:c9:6f:
e9:3e:0b:6c:81:2d:b2:2a:c3:10:fc:52:ee:ed:19:3e:ad:82:
16:32:53:51:7a:c9:d9:db:1c:83:70:61:46:b3:2b:a7:4d:02:
31:f9:a9:cd:51:7d:69:7f:ae:0c:a5:2f:56:24:bf:24:59:07:
49:b1:80:ac:f4:9d:9f:07:f2:cb:50:34:c2:77:4b:c6:ff:d0:
33:18:96:8b:f1:77:3a:63:39:b8:93:a2:d6:95:fa:61:bb:f4:
2e:8d:22:dd:6e:69:00:ce:6a:8d:5b:03:d7:fc:69:2a:59:70:
3e:20:ff:07:0c:67:ad:cd:b5:ad:1b:f0:6e:27:ff:18:e1:5d:
c7:1f:65:67:49:ce:f4:2e:16:76:38:44:f9:5e:81:f6:30:7a:
18:5c:33:25:bc:77:6a:bc:82:6c:0a:aa:02:b2:c0:c1:57:65:
5f:0d:16:3d:27:84:26:8f:60:99:c6:86:cf:32:1c:b4:d6:41:
c3:2d:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:30 2025 by rpki-client