Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: sVnoiOy2Own3dhTnh+PjV0Oi7NG37A4vJXworDiYics=
Subject key identifier: 7B:E4:15:C5:B3:88:B5:17:B3:02:6F:1E:0F:97:1D:2E:77:81:68:1C
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 0197CBDEB3806DC5BDB656F2211FC70360EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 1579
Signing time: Wed 02 Jul 2025 16:00:59 +0000
Manifest this update: Wed 02 Jul 2025 16:00:59 +0000
Manifest next update: Thu 03 Jul 2025 16:00:59 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: O7phjNk8cU81wIcPR7KIFRnYl0pojY9OfJEnkeCpkdA=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:b3:80:6d:c5:bd:b6:56:f2:21:1f:c7:03:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Jul 2 16:00:59 2025 GMT
Not After : Jul 3 16:00:59 2025 GMT
Subject: CN=7be415c5b388b517b3026f1e0f971d2e7781681c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:af:f2:8f:e4:59:83:c8:a5:87:b5:bd:d6:
7f:b0:ac:09:76:1b:a6:0b:8f:ed:01:e4:34:75:71:
b8:8c:57:ec:e9:a7:8c:8a:ac:20:9b:73:ae:83:f0:
4a:f3:a9:96:68:b7:25:4a:0d:0b:ab:ec:0f:0a:60:
3a:b4:2b:04:b7:80:fb:61:cb:e5:0d:8c:70:a9:4b:
e3:b9:db:c1:e7:dd:18:e5:66:37:0f:b6:1c:36:42:
60:35:64:d9:83:b4:23:1c:54:e8:28:cd:cb:ce:b3:
51:fb:bd:e5:46:f4:60:d6:b3:a0:20:44:07:d8:54:
4b:ca:71:ce:26:da:ea:11:28:f2:39:a8:2a:20:e2:
cf:2f:44:2d:b1:c6:1a:37:6a:c5:79:a8:21:d4:90:
ba:c7:ca:d3:c5:72:0d:7c:63:8b:ac:1c:41:c1:12:
eb:68:d2:67:60:3d:d3:c9:ef:30:46:cb:e1:72:2f:
b5:dd:65:b1:83:3b:68:7d:58:50:84:1a:51:7a:71:
d2:87:b8:f1:8f:96:51:f6:21:f5:0b:b2:17:51:ec:
af:fb:47:49:4c:1e:52:79:6f:b3:3f:02:e2:37:93:
3a:93:44:6a:5b:71:10:5c:93:5f:29:02:69:70:19:
a6:14:8a:3b:ec:05:58:75:29:29:89:24:2b:f8:67:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:15:C5:B3:88:B5:17:B3:02:6F:1E:0F:97:1D:2E:77:81:68:1C
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:82:f5:e5:e0:5c:20:a5:64:0f:72:f4:22:a0:94:bf:c7:cf:
48:78:80:6a:81:a4:79:f1:ec:9e:05:98:45:7f:be:72:68:83:
7d:e6:eb:6d:16:1e:45:4d:cb:0b:1c:22:25:e8:f8:de:77:af:
45:aa:dd:2a:c3:58:20:36:da:61:b4:18:4c:5a:f4:07:a7:4a:
9b:30:65:8d:ca:dc:d8:50:0c:04:9d:9c:12:87:01:9e:f9:6d:
20:7d:52:6b:a9:91:9c:81:05:d9:22:ac:40:b6:a4:be:dc:8e:
db:3d:3b:dc:05:92:51:25:ff:9a:54:d8:1c:78:8b:4a:43:54:
c7:0a:8d:1e:8f:79:b0:a1:c4:d6:77:13:29:ef:59:6d:1f:62:
bc:f9:20:80:61:4c:48:b4:b5:77:b8:50:78:f2:ac:f4:b3:87:
1b:06:e8:2e:80:e3:f7:5b:6c:2f:65:b9:18:61:84:63:4e:17:
44:72:96:92:6a:b3:03:52:c0:88:b6:02:77:db:10:c4:33:c4:
b6:9b:ec:66:6f:03:49:29:9a:7d:2a:a5:07:7f:0a:c3:73:b0:
c2:ab:f9:43:a4:4c:37:45:0f:d2:75:83:8b:ba:57:0a:82:c0:
93:1d:87:64:b2:1c:78:4e:cb:19:f2:4a:01:94:5b:12:cd:09:
1c:10:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:07:01 2025 by rpki-client