Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: AbP/nzd97dObB6ucMFomPrGA6MCSbodSx4+cAzkCLRw=
Subject key identifier: 27:37:FE:3E:1C:B0:50:F5:C7:01:4E:09:CD:30:68:C6:7C:8A:55:82
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 0197B70EA8D1FDCB6728FCD43463D8F572C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: XUWHUSSr+c3gw/Qt6EuY4bVhmBNAIar3b6rSsXye/dM=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a8:d1:fd:cb:67:28:fc:d4:34:63:d8:f5:72:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=2737fe3e1cb050f5c7014e09cd3068c67c8a5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:a6:12:5f:0c:7d:fe:11:6d:69:41:02:8c:
a7:24:03:93:04:3b:8c:ab:fc:3a:2f:aa:89:90:cd:
ff:cb:c5:9f:27:b1:ef:43:68:ae:29:e0:36:60:c4:
30:da:0f:0b:ab:08:15:f8:03:6b:4d:d2:7a:90:c5:
bd:98:c2:1a:17:f9:51:5f:86:e6:93:d7:e0:ea:61:
ee:13:c3:6d:43:40:90:a3:14:62:10:59:bb:5f:37:
61:6a:7d:f3:d0:56:30:fb:ca:a4:eb:e0:bf:87:04:
7c:25:96:a7:5d:34:13:60:26:77:60:e4:c3:72:75:
f7:67:a6:07:d8:55:be:55:ae:39:46:6a:f2:e3:01:
12:fb:09:e4:3d:af:36:19:aa:6c:ea:8b:90:d2:1e:
9b:b0:e7:7e:ec:04:b6:09:5d:73:0b:5f:07:1e:13:
dc:80:00:25:0d:1a:11:0e:39:e6:02:5c:81:d0:89:
34:a8:55:83:32:0d:0b:a8:f9:4f:36:63:3b:e8:ae:
c8:7a:f8:44:df:81:a3:c4:4b:69:39:90:eb:7b:84:
47:29:e9:07:3d:3f:73:07:7a:b4:70:b8:0b:fe:fe:
cb:cb:78:9c:0b:e8:72:61:74:31:af:a9:23:71:1a:
3b:59:e1:48:3b:5d:5b:7a:f2:c6:da:17:9b:56:64:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:FE:3E:1C:B0:50:F5:C7:01:4E:09:CD:30:68:C6:7C:8A:55:82
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:5f:bf:7c:49:ce:4e:07:06:6d:a6:2d:f0:b1:d4:a2:ef:
5a:cb:bb:e8:a3:35:b2:1e:02:5c:c2:63:b9:f6:af:c5:c3:c2:
4c:ee:98:be:33:73:62:48:c8:19:36:fe:6f:5d:f1:13:f3:51:
04:19:17:55:47:72:9c:b2:9b:e5:c3:87:cc:56:fd:0e:97:f1:
31:47:bf:57:c8:9c:d5:d5:c9:7c:3f:13:83:2a:39:ec:e3:3c:
c5:2a:d9:78:a4:43:2c:92:5f:f9:f0:60:dc:96:17:0c:55:de:
51:cc:c4:60:7e:0a:81:64:ca:42:f4:db:7a:1c:d8:b1:6f:02:
b2:6f:15:97:76:04:bb:7b:a1:39:91:f0:15:3c:b4:ca:7c:62:
de:86:b0:55:f6:44:da:56:1d:b5:d6:75:26:ed:fe:6c:60:82:
ce:fb:a9:0d:03:32:27:75:00:f6:84:f2:91:6a:0a:82:24:46:
9a:96:1b:9e:67:7f:f7:1f:46:d4:4b:7e:0c:f7:81:e7:54:cc:
6f:9c:d0:12:3e:30:3d:15:b2:fb:c1:3c:10:e6:05:71:ab:98:
2f:4b:be:8b:14:c7:6f:0e:a6:5b:5d:a7:64:80:a5:6b:d3:dc:
ae:32:50:83:08:61:a0:d9:cb:e0:96:d5:43:88:e6:00:92:cb:
3f:2f:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:49 2025 by rpki-client