Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: PLqh1D1W1nAejjHoxws0T3Xn/jahatvcnUQ+P6c8JO4=
Subject key identifier: EE:1A:A2:20:E5:35:89:9B:63:10:7C:EE:9B:27:89:5A:9A:6E:41:50
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 0197B7456B833649C4A796BA06E3649E9861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0E39
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: vtUjFRSSJaYvb/YiqQw42RoSiHL5pNZjYLCsToixWTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:83:36:49:c4:a7:96:ba:06:e3:64:9e:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=ee1aa220e535899b63107cee9b27895a9a6e4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:a4:48:89:4d:1b:07:f7:03:aa:d7:57:ff:
d9:d4:52:c1:62:50:68:fe:47:a5:3b:bd:6c:32:52:
52:17:b6:fe:36:a4:49:8a:bd:63:ad:15:70:b1:ad:
eb:5b:a4:f5:42:70:84:b2:98:66:72:73:83:e3:d0:
d2:63:e7:4a:19:23:ce:d6:4d:74:46:f7:c7:0d:56:
18:44:07:c5:12:34:2a:b9:66:98:58:63:9c:78:40:
fd:21:a9:41:97:68:d3:3f:ab:bd:08:92:23:8b:40:
8a:7a:86:0e:02:c2:d1:a7:22:ea:a2:5f:df:23:11:
6c:4b:70:cf:b3:21:8c:25:51:81:b8:98:62:6d:de:
ea:a4:44:3d:04:28:ad:eb:31:6e:e3:0d:f3:6d:1d:
01:57:21:62:8c:bd:6c:a3:64:74:64:b8:28:2a:ef:
85:2f:0d:c0:8e:78:84:f0:d7:2d:8f:51:4a:b3:fc:
99:17:2e:66:64:ff:6d:b6:42:5b:d9:65:ae:af:81:
2e:b4:d2:97:bb:2d:a8:a1:ff:b3:71:ec:70:b4:83:
b8:8a:80:6f:e5:57:0a:5e:bf:af:71:75:9e:a0:ce:
a0:76:69:11:cb:ec:26:7c:46:1a:48:fd:1b:79:d9:
04:68:cd:f3:c0:31:fc:be:e0:c6:2f:61:7d:b1:3f:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:A2:20:E5:35:89:9B:63:10:7C:EE:9B:27:89:5A:9A:6E:41:50
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3e:d7:1a:b3:7a:1c:84:ad:85:d8:eb:9d:67:c4:0d:02:30:
43:3c:de:f0:70:43:f9:ef:a2:d8:69:25:de:ac:37:1d:88:f3:
82:03:35:48:72:02:53:73:b8:94:c2:f6:68:29:c0:ec:1c:10:
2f:90:9b:b3:b2:a2:18:49:9b:0f:ad:9e:8a:1b:54:ff:61:9b:
0d:f7:07:48:e4:91:ae:4f:ef:25:1a:68:66:b7:b0:be:53:91:
5b:95:6e:b0:43:d7:a0:cb:8c:b9:89:c7:a0:be:ac:d5:02:8f:
ea:cc:8f:3c:d2:03:0c:6d:0d:71:65:66:f1:b8:96:35:a8:5e:
f9:30:d5:6b:6f:19:ac:bf:0e:12:18:9c:2c:f0:ab:8c:99:f9:
29:06:2b:36:54:6d:de:ef:1e:9f:01:42:f6:b6:89:b0:42:66:
de:4f:76:9c:74:48:84:98:e2:db:1a:52:00:ed:c4:be:e3:cd:
9c:6b:5f:17:79:4d:b3:dc:ce:30:7b:1c:59:ee:79:94:f0:b2:
bd:9c:71:a4:6a:16:a5:b4:79:28:22:bc:f4:c3:92:7e:d9:fd:
84:da:7f:43:4b:44:2b:29:44:11:e2:e5:81:42:b2:05:00:d9:
94:8d:64:09:58:0b:4d:57:b8:61:9c:fe:d7:35:65:9b:ed:38:
e3:02:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:53 2025 by rpki-client