Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: Xc36euU0HS6EFsXiBLvdjFQyOQC0E5gtZvazQqmjeiY=
Subject key identifier: 32:74:82:57:B7:05:24:1F:50:CD:37:6D:99:50:0E:FF:E1:24:BB:AD
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0197B70EE68942F4CE4D9B8C353D93B19D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: Y5cIAsWOpT7HGRljvqGKTmCsegrqM6Fyfg0bZLGyI/c=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e6:89:42:f4:ce:4d:9b:8c:35:3d:93:b1:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=32748257b705241f50cd376d99500effe124bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:66:fb:d7:ee:bd:12:26:e5:45:f9:b1:54:
89:51:b7:56:33:b1:d0:d7:96:6f:19:1c:e4:20:f5:
40:00:2a:e7:91:b8:7c:a2:e8:e8:24:16:fd:28:d2:
3e:6d:23:be:1a:58:2c:6c:36:7f:46:77:bd:05:02:
6f:1c:b9:3f:98:c5:57:a8:08:71:11:10:3a:19:7b:
7d:bb:d9:82:30:60:bb:66:d9:cc:6d:b0:4a:98:e1:
8c:e9:b3:1e:6a:f3:fc:1d:ea:8c:c7:7f:ce:89:8d:
1e:c4:e7:08:c7:09:57:7b:21:f3:e4:d1:65:77:8d:
a5:d6:b0:ce:40:79:8a:b6:b8:8c:2a:c8:a4:f8:61:
fe:c3:de:f1:44:b8:32:b0:7e:f5:71:2f:95:e6:86:
8f:e7:d7:9b:06:26:9d:e7:ba:38:28:fa:bd:2e:90:
e3:61:00:8b:87:a3:fa:08:71:27:fe:1b:c3:af:a1:
1c:e6:26:85:e1:26:58:82:a2:65:45:df:67:b4:70:
cb:3a:4c:74:42:ba:55:21:4a:41:99:04:24:12:16:
23:88:34:cd:62:34:95:f0:90:d2:b9:df:28:8b:aa:
84:a4:ac:00:d6:64:80:bc:1e:62:7c:13:ac:71:d6:
8e:c1:c3:af:43:f0:ae:86:1b:29:25:97:69:13:fe:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:82:57:B7:05:24:1F:50:CD:37:6D:99:50:0E:FF:E1:24:BB:AD
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4d:5b:c2:51:f8:f0:c3:ac:9b:4d:11:87:30:c7:48:ea:62:
ca:46:22:cd:43:37:bc:e5:ad:05:ee:6f:32:21:48:10:4a:d3:
8c:44:46:3a:56:4c:2f:5b:94:a6:62:69:6b:65:9c:59:cd:a0:
75:e2:c4:6a:9e:32:83:1c:2a:1d:a2:dc:4c:f9:61:c2:ba:83:
15:37:c1:af:57:4d:0b:6e:f5:cf:fb:3f:1e:d1:77:a5:56:13:
71:22:b1:08:60:0b:6e:66:a6:4d:2b:d6:02:4e:c4:64:6b:8e:
35:5a:e5:4a:ad:11:f4:e2:bd:f8:d6:da:b8:8f:b3:e1:af:1c:
63:f9:21:f6:51:8d:32:bf:1c:a4:a4:74:0b:ff:64:78:60:34:
0b:42:62:bc:f6:8a:c5:9e:1b:a7:8e:63:4a:2b:34:36:7f:07:
1f:7c:a5:d0:32:dd:bd:5b:0a:39:89:0e:8a:c0:dd:22:07:99:
da:53:d4:80:6c:0e:e2:55:04:c7:aa:03:9a:c7:7b:5a:8c:c9:
7e:9a:b1:d1:9e:5d:67:23:2a:10:a9:26:da:bf:59:42:8a:e8:
8f:68:f8:bc:e6:84:5a:5b:6a:71:1e:f4:00:00:d7:79:e6:32:
8d:e3:f9:f8:aa:7f:bc:21:c1:ea:71:52:0a:8d:d7:c5:d3:3f:
b1:41:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:01 2025 by rpki-client