Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: NokttPVLPvvtRLnQesX8X5JX03rY/4Uy2R3UvqB1MXw=
Subject key identifier: A6:E2:D9:9A:EF:73:56:D8:DB:91:6B:A0:F4:CD:2E:C4:BE:A7:AD:80
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0197B6D7B50B088BF94C85609460E67EE3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 1306
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: a78uAxr9/icA7dDdJA8pOeK7l9UJgiuGMLd8KqWO/NM=)
3: s0mRSNPGzNmp6WQ88QxkbOS9ktc.roa (hash: /+qWzxH2Ky85VShyjzGhO9D2cLW0/sLX7hqo1iX/VWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b5:0b:08:8b:f9:4c:85:60:94:60:e6:7e:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=a6e2d99aef7356d8db916ba0f4cd2ec4bea7ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:52:24:a0:30:ce:62:56:2d:3e:06:17:a4:
20:31:a4:ef:49:84:62:60:c8:a3:70:4c:bc:64:50:
c5:b9:cc:fa:62:6d:99:59:8e:bb:63:9e:42:29:87:
17:6d:74:4f:e3:e8:11:9d:ce:7e:60:db:53:c2:a3:
83:fa:ce:98:56:51:8a:1f:20:3f:2c:40:11:fc:4a:
81:7f:11:77:e6:c0:b4:da:07:fc:14:d4:d6:eb:91:
a7:51:42:e3:ad:1e:e7:6c:24:65:9e:c7:c0:80:0f:
b2:cc:f1:69:56:b1:ea:36:50:05:88:5c:6e:f8:ba:
fd:3a:50:00:8e:8a:38:e8:d5:56:b9:db:35:b2:5e:
e4:a0:97:12:6c:fd:62:aa:e9:59:42:40:f9:1d:1d:
e2:5d:d3:61:80:15:4a:9a:51:dc:e5:91:2e:1b:57:
8b:1b:74:77:0f:e9:ef:7d:d1:38:48:fb:9d:14:af:
cb:2a:4f:af:98:7f:e4:de:0f:33:e2:38:42:26:dc:
5a:0d:48:45:34:5d:8c:f3:fc:61:0c:e1:a4:aa:f3:
28:12:d0:5f:db:8d:a8:2a:91:4f:92:76:f6:5c:a1:
d2:72:dc:47:fb:ba:a2:f0:0c:d8:99:2a:0a:c4:e9:
b0:a0:8d:fd:67:c3:54:73:fd:2a:57:72:a7:e4:7b:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:D9:9A:EF:73:56:D8:DB:91:6B:A0:F4:CD:2E:C4:BE:A7:AD:80
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:44:44:5d:43:b1:34:8d:4d:c3:ad:2d:8d:f8:72:8d:15:
82:88:87:ef:3e:ee:5e:93:44:b7:18:6c:00:96:7a:b1:56:c1:
0e:d2:20:18:07:62:a0:08:68:e9:3a:31:c8:9e:10:7e:80:50:
ed:ac:e8:6e:a1:41:12:db:46:34:e1:7f:3b:65:c9:78:94:cf:
5c:a5:9d:b8:90:50:b3:6c:d0:69:7c:08:0f:69:0d:49:6f:e0:
02:9a:5d:d7:2e:fb:54:51:f5:41:08:22:20:03:fe:eb:aa:e5:
26:35:53:9e:64:76:bd:a9:b4:bc:4d:a8:46:71:80:04:20:fb:
56:35:05:b9:9e:a2:3a:a0:46:29:6e:8e:88:8d:80:7a:bb:1d:
59:55:c0:12:0d:3c:b5:ff:39:8c:b4:a5:64:31:69:3f:81:bc:
e5:0d:32:9a:c8:c3:46:53:b1:55:de:c6:02:65:08:75:5e:a6:
7f:f8:08:97:69:5b:e7:19:68:c2:58:63:a0:04:a1:30:3c:25:
fa:c0:bd:2a:8a:04:d7:67:8e:df:10:bf:f1:e9:33:23:6f:34:
6c:c1:c3:d2:87:e3:0f:e2:d1:c0:e2:89:72:f0:f0:09:61:9e:
5b:a6:d6:d4:ef:b4:ef:2b:80:81:70:9a:95:94:23:da:d8:05:
f6:1e:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client