Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
File: 5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json)
Hash identifier: JjLU2Rz2ijzkVk7IkN83phJd1u6pAoF738/LU0dNOwg=
Subject key identifier: C7:01:41:BD:B6:65:7B:41:78:CF:57:84:63:FC:2B:97:E4:A8:46:99
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 0197B6A101A245CAD4870128112539ED020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
Manifest number: 15CE
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (hash: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=)
2: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: n3w71aucXZN5XZ5Te2YQADbPj20UJKpej48/Z/CayHg=)
3: GSndTXoc8xWBynRYSOSImTWizWI.roa (hash: m9YHTlxhLFxSnEdQXQV56My1RhJzuPVGWH107hhpQxQ=)
4: HjNua0dFgpkvwB-2kmKtW5031EA.roa (hash: UWL5Ul9aduvJMi5yN3mtpVMI0fRcmhstXLKdz4JcVUs=)
5: HyczfulBdiGXqNt52BO2o4LV9yU.roa (hash: x9uCEMOnws5vMXyPMhg97WPs5qUhjuF314Fl6KzRZMY=)
6: X1X7ZkF1pBeBlChTftAa-gl-dqU.roa (hash: Gtx9uFZigYKIeTJhv0iE8fOk8wT5aB+bybyaVuFnzWU=)
7: qG5K341kb3h2E7rZoTDgHUpgRn0.roa (hash: sSAY774ANoBJ8I/YSkHzgUMD3dk/efHXAZH71Rv6miI=)
8: vTdkc2WjRZI77wKyTBFTapZQVng.roa (hash: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:01:a2:45:ca:d4:87:01:28:11:25:39:ed:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=c70141bdb6657b4178cf578463fc2b97e4a84699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:c2:0c:c8:14:2e:64:c0:bf:50:53:de:71:
45:ac:6d:f0:3f:e9:af:aa:c1:45:8d:1c:81:a5:d6:
90:b7:b2:f3:d6:18:80:44:00:02:ad:fb:02:99:50:
43:36:96:ca:4d:fa:32:95:7b:bc:da:ef:f8:5b:ae:
5f:96:8b:ff:e0:6a:b1:81:e1:00:16:5c:82:12:e3:
8b:e9:1d:be:08:12:2a:63:e8:a7:db:1a:75:77:94:
27:a8:42:f8:8b:28:68:30:17:41:27:f9:61:25:74:
ba:a7:8b:42:79:72:e6:0c:c9:04:40:df:79:a4:6e:
a0:22:6f:21:f8:a3:f3:e9:6a:34:4d:78:dd:6b:a1:
e9:59:00:0e:fe:3a:49:06:51:53:09:f5:11:fe:99:
1a:85:39:64:03:0b:45:e9:96:64:45:a1:ea:fb:1f:
b7:32:d1:b3:b1:83:bd:af:62:68:ed:d7:89:0b:09:
3d:a1:1e:9f:81:fc:c5:c2:80:9a:a8:bc:f4:cf:b5:
59:24:01:fd:ff:d3:db:a5:38:79:e1:02:dc:8d:36:
d2:fc:51:74:f3:4f:0d:97:7c:4f:70:1a:d3:8b:3e:
e5:ab:bc:cf:46:89:aa:9e:31:59:4d:a5:5b:0b:86:
f3:b4:37:a4:8c:23:ef:d4:e6:35:39:e7:29:7f:c5:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:41:BD:B6:65:7B:41:78:CF:57:84:63:FC:2B:97:E4:A8:46:99
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3d:e1:7b:43:7c:a5:b1:cf:87:b6:6d:8e:4f:2b:25:97:44:
00:4e:19:ef:44:62:93:9d:89:4a:94:e9:93:99:34:f2:68:14:
52:f2:7e:a3:3c:07:09:a1:a7:6c:35:99:1e:8f:a9:09:fd:22:
9f:64:53:b3:57:50:c8:11:02:4a:f7:26:78:01:cc:4f:7e:17:
f7:00:d2:56:99:56:2a:73:67:ae:f5:6e:38:a9:de:f4:8c:4c:
10:ef:b0:f0:d2:6c:b8:3d:3f:5b:34:fa:a5:be:b5:85:2f:2a:
c5:18:1c:b6:98:d2:ee:ec:04:82:8c:d9:72:5b:28:90:9c:a5:
c8:16:67:b8:7c:f2:1a:ed:1b:57:cc:70:90:26:17:f3:8f:20:
fb:97:89:24:cf:6c:bf:51:a1:db:60:62:3a:8f:fc:d8:33:9d:
f2:8c:bd:48:68:62:2d:f0:f5:30:cf:15:9b:2d:7b:a8:50:93:
68:20:c3:11:30:20:dd:2c:07:8e:a8:96:51:42:5c:f4:7c:e7:
67:e9:dc:9c:ff:fb:1f:e7:04:c4:2b:01:dd:d3:74:e4:51:05:
e8:01:05:b1:a9:a6:18:c7:d3:f5:b7:41:ed:fa:8f:ae:c0:7a:
f7:a4:70:ad:d2:52:d0:43:3b:73:d9:15:d2:d9:57:c3:b6:c8:
d9:05:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:46 2025 by rpki-client