Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: H1Y7wsilL+eLpLtpFHBidMw01pXIfL/CsgJSe7DrjjQ=
Subject key identifier: EB:BE:03:60:C3:51:D4:59:37:F7:1B:A7:29:7A:F6:D7:6C:A7:09:AA
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 0197B632FF88E6BD01B0C13D132BA80E1608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 1110
Signing time: Sat 28 Jun 2025 11:01:24 +0000
Manifest this update: Sat 28 Jun 2025 11:01:24 +0000
Manifest next update: Sun 29 Jun 2025 11:01:24 +0000
Files and hashes: 1: 505QcayJo-pBwK1VqJNaBX1Q-5M.roa (hash: fIMbj/fl7aaDNKfopMcxB8cXpCnGq59ztvvwuTU/2xA=)
2: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: Q+J6KvVgwKwKQCebWadeSyk1QTYnTxh7LAkyUVPFXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ff:88:e6:bd:01:b0:c1:3d:13:2b:a8:0e:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Jun 28 11:01:24 2025 GMT
Not After : Jun 29 11:01:24 2025 GMT
Subject: CN=ebbe0360c351d45937f71ba7297af6d76ca709aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:d6:8f:bb:9d:ed:e5:c3:7b:a3:5a:49:da:
d0:b4:fd:ac:3c:5c:4f:0c:8d:5e:18:11:f8:b6:ba:
e0:a9:39:e2:6b:d4:de:68:4a:3c:aa:4b:b1:1b:c1:
57:ba:da:58:eb:1b:7b:34:00:cd:b7:50:ba:a7:7c:
dc:0f:c0:4f:92:a7:09:39:a1:fc:d1:46:73:e3:05:
0d:a3:cc:43:86:ea:ab:06:d5:29:b6:fa:4f:4d:3d:
0e:4b:f7:e7:1e:4a:18:a2:9c:65:4c:a4:ec:08:57:
82:58:5c:86:53:45:3c:07:56:64:81:cf:8d:5a:ec:
5e:90:f3:6a:f9:3a:8b:8f:11:4e:93:2d:e0:a8:47:
11:bf:c1:95:da:19:7c:15:ad:9d:34:5d:41:fb:9b:
69:22:0a:a5:d8:34:85:0f:a8:d5:aa:fe:22:68:ab:
9f:29:30:66:de:c3:04:a3:e3:d1:1f:00:ba:d2:72:
0d:7b:1d:6e:94:14:f6:13:2f:64:2f:66:4b:bb:b8:
84:0f:9e:3b:3f:58:b8:36:e3:d7:39:49:ff:68:76:
71:dd:0e:6e:37:0c:ed:a7:b7:34:ba:ff:10:c1:e2:
40:0d:9c:73:ad:9f:f4:92:3a:22:11:7d:e6:e3:08:
c1:7e:70:56:28:b6:b4:a5:eb:59:40:2a:05:01:0f:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:03:60:C3:51:D4:59:37:F7:1B:A7:29:7A:F6:D7:6C:A7:09:AA
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:24:97:4d:95:66:df:ae:f0:a7:e5:7a:ce:68:dc:a6:c3:
29:a2:25:11:bb:0e:07:a8:6f:bb:73:bb:09:b1:d3:20:b2:cc:
0f:89:11:e9:4d:37:f6:77:08:82:a1:ae:78:51:f3:4f:6a:64:
01:42:12:b5:c6:33:eb:75:33:4c:3c:87:51:9a:42:4d:87:0a:
c7:fa:fe:23:21:b7:4d:df:35:4f:8d:d8:eb:e6:53:8a:d0:e5:
3e:25:76:b1:60:93:c0:da:b0:c4:23:dd:54:cd:4c:7b:24:f0:
d2:da:e7:db:3e:52:95:7b:ec:26:ed:80:18:9e:49:90:f1:f5:
63:7a:4e:fe:ab:3d:c4:bf:f6:13:4d:f4:0d:4e:b0:8e:7f:ce:
47:6c:02:39:8c:1c:c9:a8:6b:33:8e:6b:6d:b8:2e:01:25:02:
df:9b:72:29:ab:cf:54:4f:68:65:30:43:a7:70:c4:1e:5f:7c:
31:9f:87:f2:6c:4c:8b:a8:4f:dd:21:e6:14:ce:71:8e:ad:f6:
1b:50:a8:af:6f:92:09:2d:a1:7e:eb:7c:1d:fc:c5:e8:b1:5a:
ce:6a:5b:58:50:b9:01:bf:99:1c:3e:d3:20:06:9b:fe:58:70:
89:ae:cc:8f:4f:e1:3b:79:5f:55:6e:de:64:21:5f:ee:42:0b:
99:2e:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:18 2025 by rpki-client