Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: cH76wS+WhnSN35Mxg1G3exL6J4EPe6MoRZmnNpq5CII=
Subject key identifier: 74:20:36:15:D0:CC:F2:A5:C6:0A:11:91:AF:12:B6:96:24:18:21:3D
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 0197B77C5ED1AEC92CF91BB314CA2D09E94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: WZ+PsyikGA2ApOyEgCubpaIu8XxZ6L/HEsk42KkQ+BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:d1:ae:c9:2c:f9:1b:b3:14:ca:2d:09:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=74203615d0ccf2a5c60a1191af12b6962418213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:2a:a4:a1:b3:60:2d:f5:d8:68:da:8b:78:
7b:93:5c:51:c9:12:ce:de:89:a2:69:5d:19:42:98:
da:b1:cd:04:a6:31:86:78:ff:22:24:cb:d0:40:9c:
d0:98:a6:c6:26:e9:84:19:1d:4d:a8:3c:59:d6:fd:
ca:54:b1:47:fe:b7:2b:48:b2:73:be:cf:b5:73:1f:
4e:bf:43:23:e7:fd:af:1d:03:5a:7d:d2:d8:61:2a:
6f:a5:23:a9:0c:f8:45:21:a6:f8:bb:7e:50:5c:4b:
6f:1f:d2:70:94:ce:df:1c:e5:8c:53:a0:32:93:ee:
01:2f:84:c6:c7:ee:dc:05:b7:be:04:1e:6c:d3:37:
22:32:53:74:04:af:68:19:40:1e:6a:2f:0b:1f:62:
a6:5f:f8:64:b8:db:48:eb:40:08:71:52:d0:66:1d:
4d:8f:1a:55:d2:bd:cf:a7:14:35:88:37:fc:a5:46:
f7:48:cd:11:29:31:2e:da:b1:d6:9c:57:ee:c0:ac:
a8:ce:41:a5:7d:d4:6f:2c:a7:8a:25:a1:f8:64:8c:
c8:88:48:a8:f7:df:70:8c:78:12:16:5e:f3:3e:13:
78:80:6a:85:fe:3b:1e:e5:9d:62:e5:02:46:f3:e4:
d5:ef:48:47:57:76:cc:15:d7:b4:3d:2c:c0:be:fd:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:36:15:D0:CC:F2:A5:C6:0A:11:91:AF:12:B6:96:24:18:21:3D
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:13:27:9a:64:84:04:e8:fc:33:d1:64:42:bb:ba:15:82:
e6:a1:05:54:52:9f:02:e5:22:e0:cc:89:e6:75:bf:5f:92:94:
01:62:08:89:24:f7:f9:24:25:38:9c:a6:28:d2:e5:4b:6a:b6:
90:43:e6:a3:a1:37:1e:c9:da:8d:2f:fe:60:94:2b:93:be:2b:
95:be:a5:e1:48:de:48:77:e7:e5:dc:3f:d5:bd:56:6b:62:dc:
66:12:03:9b:10:0c:91:7f:1e:14:e0:54:0d:46:e5:c3:f6:45:
ed:92:34:5f:8b:97:a1:10:82:ce:3d:c1:91:7b:f1:45:e2:0c:
c7:0c:65:40:1e:68:9e:d2:ad:24:0f:4d:d4:91:29:96:3c:7d:
6e:20:c9:99:bc:b6:1d:64:fa:06:58:f3:44:24:22:20:70:b5:
44:9f:0c:11:5e:7e:6a:76:8c:15:fa:19:6d:14:31:fe:f7:eb:
09:a4:6d:a4:50:47:4e:84:89:21:9e:b4:4f:a3:d4:f0:8c:99:
d3:17:8f:92:17:73:e0:7e:3d:67:63:28:4e:8c:db:1e:9c:3c:
2c:f1:f7:d1:54:ee:f6:a6:df:2f:5b:d7:7c:4a:12:d4:13:31:
b9:fc:93:c5:ca:70:37:a0:30:36:91:31:60:85:2d:fc:34:b0:
64:22:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:09 2025 by rpki-client