Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: Tcofl7+k6VVGB0gcMGlx6OrOkL26jAq7yThgFCzg1JY=
Subject key identifier: 0D:F5:01:AC:85:0D:F2:BC:7F:EF:6D:A0:8B:ED:9A:8D:8F:2B:4D:17
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0197B9A18770D00336D8CD8C87F5AE6E9560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 03E5
Signing time: Sun 29 Jun 2025 03:01:00 +0000
Manifest this update: Sun 29 Jun 2025 03:01:00 +0000
Manifest next update: Mon 30 Jun 2025 03:01:00 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: 8J53kl9LLWde+PheukgqHg5pOkmmibw/KUJppU5Bfq0=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:87:70:d0:03:36:d8:cd:8c:87:f5:ae:6e:95:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jun 29 03:01:00 2025 GMT
Not After : Jun 30 03:01:00 2025 GMT
Subject: CN=0df501ac850df2bc7fef6da08bed9a8d8f2b4d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:fb:10:61:cc:82:9f:25:4a:f1:f2:52:0a:
09:fb:9d:b0:96:d6:5e:e8:9a:03:84:67:8a:34:80:
8e:0c:21:62:07:de:61:3c:5f:76:93:27:7d:ea:82:
4b:53:c6:2b:d9:75:f9:84:c9:ae:89:4d:66:9e:02:
97:60:a6:a3:78:13:bb:52:ab:6f:27:59:0e:f7:b9:
e5:08:43:42:bc:46:42:65:e2:38:83:ea:8d:79:ac:
68:a0:08:9d:be:d8:c1:87:b8:93:77:55:03:13:c7:
96:4b:96:0a:c5:c3:03:a7:4d:be:bf:be:ee:67:48:
c0:c0:e6:6b:a4:40:67:e6:aa:50:ee:c3:26:c4:0e:
b8:cd:8e:16:04:c2:41:4d:9a:d9:ec:3f:c1:dd:92:
62:fc:db:42:9a:d4:c9:cf:98:32:f2:c4:52:4a:2b:
36:de:f1:e3:af:f5:5d:d7:bf:95:6d:54:18:f8:a9:
d5:36:c5:b6:2b:46:2c:71:a0:b6:89:f2:9e:e7:1e:
28:dc:ec:e8:0b:c5:46:78:82:ba:ae:a9:9b:3d:2b:
3b:69:cb:c2:66:0b:c6:86:b6:ce:04:72:2e:9a:ac:
9a:49:1d:54:ee:6b:43:44:93:9e:e9:da:35:28:b6:
7a:72:82:f8:d3:5a:13:ca:3f:df:85:00:d8:9e:9b:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:01:AC:85:0D:F2:BC:7F:EF:6D:A0:8B:ED:9A:8D:8F:2B:4D:17
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:bc:61:5c:30:4e:b5:e5:72:c6:ee:6e:8d:e1:fa:02:c5:
f7:08:07:7b:29:5f:21:21:e1:b3:c7:ae:d6:2d:c4:14:16:d5:
48:33:32:e9:a2:1d:da:d1:b9:3c:38:f7:ae:61:0a:73:8a:8d:
38:35:11:0b:7c:60:78:f9:b7:ee:16:58:e8:cf:4e:2e:19:77:
02:4f:2e:12:66:3a:ca:bd:51:f1:7b:9a:36:85:96:91:83:9f:
28:97:19:1a:87:35:b8:05:a1:0f:82:9b:a1:91:f1:9c:d9:6a:
9e:3a:b7:ea:34:a9:27:7a:36:8b:dd:cb:64:f1:49:ab:38:3a:
75:58:d9:f9:12:92:97:86:46:c8:c7:a2:9e:36:9c:71:4d:fe:
43:f1:92:67:34:a2:0a:1f:b1:e9:77:c8:88:70:15:7f:97:dc:
bc:6f:83:a9:ad:70:c2:e1:7f:3e:48:12:79:84:64:2a:e2:4b:
dd:bc:5f:df:fa:d1:ff:5e:e9:0a:d3:39:a1:85:9d:af:47:41:
f3:15:69:16:20:e2:b3:fd:8a:8b:de:5d:34:21:b2:af:fa:31:
d2:db:73:e2:26:ce:ac:62:71:8e:69:bb:84:d8:aa:66:12:2f:
d5:38:59:23:e6:77:d2:88:ea:7c:15:ff:fc:ff:76:d2:23:77:
f2:46:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:40 2025 by rpki-client