Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: LQXJPBSP5fR0uzXBJTbqStko0WoVjDFj92RC16aOOx0=
Subject key identifier: EF:F6:14:E1:B3:37:72:91:84:C9:CD:B0:25:C9:A7:AD:FC:DF:D2:02
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 0196DE55881D539C296FE08B2309C68C934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0867
Signing time: Sat 17 May 2025 13:01:09 +0000
Manifest this update: Sat 17 May 2025 13:01:09 +0000
Manifest next update: Sun 18 May 2025 13:01:09 +0000
Files and hashes: 1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=)
2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: /ivpjNcSckxSuvRTFa6N2cXN0NazymG/LUl7YxTUJuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:88:1d:53:9c:29:6f:e0:8b:23:09:c6:8c:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: May 17 13:01:09 2025 GMT
Not After : May 18 13:01:09 2025 GMT
Subject: CN=eff614e1b337729184c9cdb025c9a7adfcdfd202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:93:52:9b:ab:1d:a1:b1:b9:c6:3b:98:de:
6f:ef:d7:d3:b4:0e:b7:3d:4a:3d:ec:d3:df:be:45:
b6:1f:06:b1:2e:95:64:ba:c4:de:53:ec:4d:a8:ae:
02:69:7f:4d:45:53:83:f8:96:21:3c:2c:0e:52:d1:
3f:43:08:0f:12:d3:2a:da:06:2d:17:9e:10:d9:ef:
b6:76:4e:c7:ff:97:30:f8:f2:07:3d:05:b9:a6:88:
96:bd:67:26:54:30:ea:81:c6:3d:e8:d3:be:45:d5:
2c:ae:59:c1:96:3b:ad:0c:9e:12:89:47:58:e2:52:
2a:e9:9b:ef:8f:c6:92:23:4e:19:48:d9:fe:ac:40:
64:73:8d:48:c1:fe:3d:57:f7:da:3e:a1:b5:22:34:
3a:5e:71:75:41:4e:ce:a0:e2:87:e4:7f:41:33:bc:
6a:8e:3b:f5:ed:72:ba:10:ab:ff:05:08:f6:a6:7f:
03:19:a7:8e:82:4b:de:2b:bd:71:be:3c:37:f6:40:
97:2d:b8:5d:23:fd:42:03:c4:08:91:9d:c8:bd:f4:
80:77:8d:de:4c:4a:bc:5e:c3:fb:3c:f1:f0:b4:d4:
19:4e:58:da:23:18:a2:57:26:5d:c0:64:af:97:9c:
11:ae:ff:96:c4:65:7d:f3:28:52:67:29:2c:4c:3b:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:14:E1:B3:37:72:91:84:C9:CD:B0:25:C9:A7:AD:FC:DF:D2:02
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b3:29:60:0e:68:bb:2f:01:ff:e4:06:ad:38:40:77:56:c1:
95:49:03:7e:37:76:b9:02:69:63:78:d6:8e:c1:cf:23:1c:ee:
03:20:a1:c5:54:4d:0c:15:35:32:5e:38:01:0e:f7:31:1a:63:
aa:90:63:66:7c:77:a7:90:b9:ee:f1:a3:31:be:c5:f3:30:6b:
b4:0d:5b:1a:a4:69:b7:c6:90:e0:2f:1c:c7:b7:1f:e9:c9:6f:
74:03:bd:ea:08:d4:c7:ea:22:fa:83:9b:db:9b:ae:b9:9d:75:
1c:6d:77:4f:e9:bf:69:e8:4f:74:20:5d:02:53:50:df:13:89:
db:62:5d:37:47:a8:24:fd:27:b8:d5:27:aa:77:ae:fa:b8:56:
7f:a4:a5:88:5d:21:51:2d:f8:97:b0:f2:5b:46:94:77:97:d3:
96:32:24:a4:90:15:59:2f:58:7e:1a:e2:64:3b:5f:76:de:30:
f0:4e:2b:08:cc:14:21:84:d3:55:54:f9:ac:e4:2f:84:70:8c:
04:92:56:a9:6e:9e:bb:3e:8d:36:c8:45:0d:92:83:75:de:1a:
a9:48:1a:79:be:9d:c3:38:b4:24:d6:4c:63:94:4a:6c:87:89:
e6:33:86:97:d5:46:2d:4e:c8:e7:9a:2a:46:b9:bd:fc:91:5b:
a0:00:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:48:41 2025 by rpki-client