Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: Czj6PdbAFKMCe2ptzL0gpFozAZR/jPtzR8+RjV8wZHA=
Subject key identifier: 10:2B:56:15:C3:A0:68:53:7C:31:7E:29:A6:62:14:48:B2:54:EE:88
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 0197B7EA5B142307184D8468B7F0F81ABC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: OiNQAxNUEsq9eMZdS4kuLRzO0M3QS9W0xeUP/wo7qhc=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5b:14:23:07:18:4d:84:68:b7:f0:f8:1a:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=102b5615c3a068537c317e29a6621448b254ee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:86:b6:d4:f2:7f:c7:32:04:61:04:4f:f0:
8a:0a:13:32:e3:9a:b8:a5:64:7e:6e:9a:1b:bc:4f:
d4:f6:9a:f1:00:fd:ea:78:0c:94:e9:c6:54:79:ea:
60:03:6d:ce:db:3f:df:7d:82:4b:37:6e:af:9c:94:
26:0d:88:62:fc:df:d9:ff:82:78:37:36:6d:6f:85:
91:ed:a2:09:e8:d4:00:b4:15:07:86:03:d7:cc:1a:
e1:9e:82:ee:5f:c1:94:c8:24:a2:17:79:0c:70:9f:
dd:76:93:ae:b7:47:ea:95:04:ab:d3:4e:50:fd:fe:
1b:07:61:8e:04:f7:01:dd:cc:60:0d:8a:98:ce:da:
ef:8b:78:e1:5e:78:22:4b:45:63:28:88:c6:dd:e5:
04:45:eb:82:30:3b:5d:33:45:c7:71:76:3c:ee:e8:
d2:e0:07:85:3a:18:4c:c0:2f:3d:0d:ec:3a:05:75:
9a:81:27:dc:ef:11:d4:98:a3:9b:38:8e:e7:e0:15:
e6:93:1e:3a:b8:69:9f:89:03:0d:3c:9d:af:fe:24:
9e:0a:5f:1b:91:42:fc:25:ff:7b:be:5b:8f:05:b7:
82:a8:54:c0:bf:de:6b:2b:8a:66:0d:83:86:78:b9:
4c:18:47:5f:bf:0a:f5:24:f0:e3:14:f2:11:11:88:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:56:15:C3:A0:68:53:7C:31:7E:29:A6:62:14:48:B2:54:EE:88
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:47:01:8c:fc:2b:06:96:7f:d8:9e:24:56:c3:42:e0:61:
a3:67:d0:e3:44:0b:1a:fd:f4:f2:f1:f1:82:ca:7a:79:95:4d:
09:c3:7f:f7:da:a4:80:ec:93:c5:69:01:ae:d1:9d:48:7e:3f:
01:59:0e:29:ed:0f:2f:81:11:c9:62:fe:b2:6c:9a:7c:e3:13:
4a:de:46:7d:99:72:8b:50:6d:f3:28:1f:21:1b:c7:96:71:8a:
9b:1f:e4:85:10:c2:e0:e1:a6:c6:4c:83:cc:51:60:d7:d8:6c:
1f:41:7c:3f:af:3e:e0:90:22:7b:79:b9:3a:6e:31:0f:ef:5f:
60:60:62:8a:dc:be:f2:98:0b:3c:d0:12:3d:12:82:af:11:53:
17:b2:77:75:ac:7d:80:4b:81:91:75:3d:46:9a:f2:bb:04:47:
56:f0:bb:fd:64:af:af:0d:dd:c8:50:f1:91:b7:5c:03:23:e3:
28:03:6f:b0:c8:31:21:05:f2:23:f7:59:69:bb:18:09:48:23:
0f:32:b2:5d:81:03:a1:35:63:6a:c4:7b:ab:89:c1:e0:e6:25:
3c:87:71:89:76:4f:42:e3:77:76:29:30:6d:2e:fc:93:32:a3:
8a:66:38:da:b0:6d:90:cb:d0:54:b7:50:3f:17:fd:8f:37:ac:
ad:d8:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:41 2025 by rpki-client