Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: xTqNGbPYdkwYopZIvdR5UJfQ6mlSxUKMVzEfV+2KCmg=
Subject key identifier: CF:2D:C3:07:38:80:AB:23:F4:31:5C:E2:13:78:B6:4D:1C:5D:6C:AE
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 0197CBDEAEF98EF69D7E01ECA59FD86160D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1251
Signing time: Wed 02 Jul 2025 16:00:57 +0000
Manifest this update: Wed 02 Jul 2025 16:00:57 +0000
Manifest next update: Thu 03 Jul 2025 16:00:57 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: lSMFg15i/s/uBbqVXVWfuLfra2xZH85nQDorkC6Dw1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:ae:f9:8e:f6:9d:7e:01:ec:a5:9f:d8:61:60:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jul 2 16:00:57 2025 GMT
Not After : Jul 3 16:00:57 2025 GMT
Subject: CN=cf2dc3073880ab23f4315ce21378b64d1c5d6cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:32:ab:3d:45:b0:c5:6b:b3:ed:5e:b9:90:
67:f0:d5:61:7e:ec:1f:73:83:00:4e:8e:97:da:de:
4d:82:4a:f4:3d:02:97:d0:ac:8c:4f:02:b7:1f:53:
5b:3f:7a:73:05:ae:26:03:46:bb:81:98:40:ea:c1:
85:63:49:6f:ca:d5:74:de:52:d4:b3:2a:39:91:f0:
30:1e:18:f6:d1:0a:89:b9:55:72:bb:f5:ad:57:e4:
f7:ea:f9:bf:2b:42:c1:ba:6e:d0:6e:d6:3b:7e:98:
79:d6:dc:aa:34:58:99:5e:52:37:58:cd:16:41:8f:
64:b4:fd:8b:99:c3:0f:ed:49:6e:d8:fc:6d:c6:5c:
07:05:52:d3:f2:00:aa:9d:86:5e:73:86:05:a7:71:
4a:1c:1e:0f:52:77:9e:41:08:b9:f2:2b:f7:ef:c2:
da:de:9c:f9:e5:cf:ba:67:82:60:18:5c:42:63:d8:
a5:f1:12:80:ed:52:4e:d4:23:65:5c:1c:e2:06:1f:
7f:0b:e2:bb:41:4f:87:87:4b:f4:3b:5a:b0:bc:30:
84:f8:f9:02:70:70:3f:d8:3a:ff:d9:37:1c:0c:71:
22:20:7a:01:ae:27:22:4d:ba:52:15:53:ba:62:a9:
89:83:fc:42:64:20:42:41:8c:26:f1:6a:41:ea:34:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2D:C3:07:38:80:AB:23:F4:31:5C:E2:13:78:B6:4D:1C:5D:6C:AE
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:81:39:ff:69:08:dc:a8:32:79:d7:2d:0b:82:b8:50:a1:2c:
3e:bb:5f:d9:b4:d0:ed:8a:e5:00:ac:09:7f:f8:b6:6c:7a:30:
2e:c2:9d:a9:ae:0b:dd:ef:63:03:52:3c:47:80:ad:5a:be:64:
57:59:48:9f:d5:60:df:39:88:af:07:3b:51:b8:c2:4c:49:87:
7e:f3:71:fd:a4:17:15:89:be:87:86:01:91:e7:35:8e:98:86:
23:89:52:d8:f6:09:15:86:c8:86:c4:28:a5:e7:dc:f4:d8:8a:
d8:a6:34:e5:7f:e2:f7:49:f5:8f:e1:d4:cd:8e:5e:3d:06:72:
0c:ed:aa:17:62:f9:d9:3c:d8:66:15:a7:fe:08:84:cd:40:64:
01:81:0b:74:52:fd:4d:fd:93:45:75:e7:00:cf:1c:64:8f:a2:
e7:26:c7:1d:8d:27:41:e5:9a:8a:a8:69:ab:10:32:09:57:d7:
6f:3e:32:9a:24:0a:98:d1:c4:31:55:6d:9a:02:20:ec:fd:61:
67:00:03:f0:10:35:7f:e2:99:3b:72:82:5f:20:df:7d:ef:47:
f4:d4:5d:dc:de:5c:de:21:56:c9:8c:bc:5d:bf:37:77:e5:e3:
eb:f2:62:bc:cf:a3:d6:2b:05:59:96:71:3f:3a:07:68:69:46:
a7:c3:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:47:22 2025 by rpki-client