Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: w+jyf1Jf+lT0q6jAm6mheqvBwWeC+oIE0PaICy7U9ig=
Subject key identifier: E7:00:8A:73:AB:77:A7:E5:AB:6E:FF:0D:63:97:38:93:C6:38:61:1B
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 0197B88F8BFA6B240B178BF1D41B969FDA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:44 +0000
Manifest this update: Sat 28 Jun 2025 22:01:44 +0000
Manifest next update: Sun 29 Jun 2025 22:01:44 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: QOqp0xHeQ89bcGVj09qDzmssBex1iQ9V7LR50PkCPAQ=)
4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8b:fa:6b:24:0b:17:8b:f1:d4:1b:96:9f:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Jun 28 22:01:44 2025 GMT
Not After : Jun 29 22:01:44 2025 GMT
Subject: CN=e7008a73ab77a7e5ab6eff0d63973893c638611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:97:ea:8e:3a:2c:5c:e5:fc:6d:67:43:45:
6d:ce:80:3b:7a:4b:b5:71:92:99:54:a6:aa:06:41:
29:fd:80:f4:d1:22:6e:76:04:15:6b:7d:ab:1a:ec:
47:b9:50:ca:0d:99:47:33:b8:89:ba:69:49:cd:86:
fc:e7:2e:57:cb:7d:52:ee:2f:47:ee:15:9b:d9:1a:
44:db:d0:c4:33:bb:a5:b8:54:42:5e:dd:ea:45:f7:
d3:98:b2:92:37:25:0e:d5:07:3a:f6:96:33:ee:85:
9c:8c:f2:57:ae:1a:ae:1b:a9:fd:31:17:e7:fd:b2:
3a:36:25:7b:f7:a4:65:45:5c:ae:f6:1d:90:f9:e8:
dc:b6:0d:04:8a:9b:82:e0:dd:b9:b5:ff:c5:2d:af:
65:5e:83:5a:6a:f7:a1:62:88:ae:6c:9c:ce:e3:c5:
d1:12:2c:bd:46:56:31:28:02:05:95:d3:dc:9c:6b:
68:c9:76:d2:54:b7:34:38:40:d8:58:9a:a4:eb:18:
c4:04:63:72:7d:b7:02:d0:70:45:d2:a8:5b:fa:48:
c9:23:79:16:7e:ce:08:25:57:07:6e:b9:d6:21:3d:
1e:61:25:f4:ff:dc:61:1b:7d:09:d6:79:a3:53:8e:
48:87:1d:2b:ac:57:b3:a8:a9:3e:91:57:0c:5f:43:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:8A:73:AB:77:A7:E5:AB:6E:FF:0D:63:97:38:93:C6:38:61:1B
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:21:1b:db:67:78:23:2a:f1:c1:4f:05:5f:a3:2d:2e:83:33:
2c:ee:66:b8:7a:20:4d:e9:66:2f:dc:04:4d:2a:ca:0a:a0:4c:
c5:62:86:07:f0:e0:c2:75:b5:e7:ac:aa:14:2f:78:9d:be:aa:
05:79:30:8d:b8:f1:d8:5e:cf:77:d2:df:a3:2c:4d:81:1f:83:
c1:5c:38:5d:13:bb:36:1b:d3:40:10:24:c3:e6:35:81:5b:26:
30:fd:c2:de:ee:db:53:92:2b:db:e9:aa:5f:97:25:88:80:10:
48:c3:18:33:45:1a:3e:74:c0:71:71:3d:55:8c:ad:59:04:cc:
cf:cb:cf:61:6f:6e:ab:03:4e:11:5e:38:35:bc:96:52:db:04:
aa:af:fd:50:42:64:1a:80:f1:3a:ea:68:58:47:7e:0d:93:4c:
89:5a:0b:79:5d:a1:af:c7:9e:d2:7d:76:15:5e:af:ec:9b:be:
36:78:ad:c9:24:68:8f:43:80:cf:f6:dd:3c:40:da:9d:76:5b:
b9:c4:97:a6:b2:c8:d2:09:63:f9:6d:b0:ab:0e:d9:79:04:15:
ba:95:00:b7:96:68:d0:60:ca:34:f2:cc:ef:f3:ba:5d:e1:a0:
33:08:b7:7c:22:1c:f0:87:2e:3b:c2:88:2c:ea:d8:e3:04:ba:
10:5c:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client