Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: w/6uW7TM5AlRuLfmvelV+LqOSUR5wQ6yces8YBmy+sg=
Subject key identifier: 1C:FC:B1:2F:2B:44:CF:61:5F:65:E5:B0:06:56:CC:78:44:38:F2:64
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 0197B96A670C057DFA6DC085BE15CA03B619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 12D0
Signing time: Sun 29 Jun 2025 02:00:47 +0000
Manifest this update: Sun 29 Jun 2025 02:00:47 +0000
Manifest next update: Mon 30 Jun 2025 02:00:47 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: dHKxSR9df6uB8M8T+rutCjmuL1PT0Hxa0TZppb4wvd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:67:0c:05:7d:fa:6d:c0:85:be:15:ca:03:b6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jun 29 02:00:47 2025 GMT
Not After : Jun 30 02:00:47 2025 GMT
Subject: CN=1cfcb12f2b44cf615f65e5b00656cc784438f264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:3e:68:5f:5a:51:dd:fd:d5:c9:d2:7a:71:
86:15:f2:47:6a:14:ca:a7:23:b5:ca:42:ea:e8:15:
f6:dd:4f:86:8f:78:5d:2a:5f:17:92:a0:17:71:9a:
0f:63:3a:de:83:be:35:7c:f2:24:de:3a:f4:df:69:
4d:38:ed:2e:6c:6f:f1:91:70:96:03:9f:b0:16:cf:
a6:8d:03:be:ea:c5:e5:fd:6c:0a:3d:9c:e1:f5:8b:
98:b4:45:b6:52:cc:84:66:84:42:1d:5d:d1:fe:20:
4b:5f:a2:df:5b:5a:a9:4c:d3:fd:33:14:6a:db:47:
19:cd:77:5d:85:3b:02:7e:10:9e:df:7f:5e:24:96:
99:ea:4c:f8:56:90:18:b3:0e:33:0b:84:60:21:80:
81:c2:40:9e:fe:99:47:26:fb:96:94:91:dd:6f:58:
f9:47:1b:94:a9:1c:be:c0:c0:8a:59:ff:9a:47:68:
7f:26:93:78:1d:29:bc:d9:9e:df:7e:cb:37:4b:71:
00:12:03:45:f6:8b:f6:17:cc:7f:bb:aa:14:03:4f:
a9:9f:0c:a3:d4:f7:f0:de:eb:87:17:45:38:dd:06:
18:b6:7b:b0:45:8b:fc:32:fe:bd:af:d9:6c:d4:c2:
ca:ea:54:7a:f2:93:73:0e:81:c0:33:06:e1:9c:f9:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:B1:2F:2B:44:CF:61:5F:65:E5:B0:06:56:CC:78:44:38:F2:64
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:e7:85:4e:4b:cc:16:72:73:47:70:74:f4:c5:3e:c9:20:
41:fa:d1:4a:e0:8e:9e:d3:f7:dc:bf:75:34:b4:fd:71:e6:21:
b0:69:83:f5:6f:6e:f2:03:9f:07:e7:17:69:e4:86:d9:29:6a:
78:78:44:e0:0c:f3:69:d2:76:b9:2f:4d:39:65:0b:9d:e8:85:
d2:bd:a6:41:43:8d:3b:52:b1:c4:f5:ed:a0:96:a4:63:22:bc:
03:48:1b:ee:99:3b:b8:a0:3d:d0:4a:69:8e:24:01:ac:90:1f:
22:b1:7c:aa:72:cd:7d:31:e9:e2:83:7e:34:98:57:28:53:18:
ed:0c:91:90:b3:a9:55:b2:20:90:a9:9c:dd:dd:70:91:a7:fa:
32:bb:5f:26:36:17:3c:6b:19:de:50:e8:2b:42:31:d8:62:15:
e1:a6:11:98:cf:2e:ca:ec:69:a1:48:bc:65:77:ca:f5:5f:67:
e8:20:ee:8d:32:0f:9f:8a:a9:1a:0d:4f:37:54:72:93:63:3b:
16:25:c1:e5:5a:ae:7d:c4:a2:19:ed:ea:e8:04:7c:1d:63:96:
1c:60:61:95:24:5b:bb:b5:98:a3:e3:ea:cd:54:39:8f:17:ec:
4a:71:10:56:15:e2:e1:32:75:8a:1f:62:9f:e0:37:97:61:58:
d8:c3:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:44 2025 by rpki-client