Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: kvzffcW24owQOdF5ZWY+EOBvzurgn2ad5UV0LwGDBNI=
Subject key identifier: D8:76:27:88:38:86:8E:59:70:AC:2B:2F:D7:39:19:D8:FD:A6:DB:C2
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 0197B7454C4935BC38DCC75CE0589DCFF95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: znc79BLcMaYBvgOqbZW7uP2hK4uyI2MaVpOZW2nO9vU=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4c:49:35:bc:38:dc:c7:5c:e0:58:9d:cf:f9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=d876278838868e5970ac2b2fd73919d8fda6dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:06:b5:b5:e4:a5:7a:f3:19:73:47:ed:69:
0c:a9:08:93:0d:29:c8:ee:7f:3c:74:0c:2d:a2:d7:
c6:fe:b9:bc:dd:3d:d7:c3:93:d2:6a:06:7d:ff:3c:
d9:ab:13:e7:37:f1:d2:73:33:f6:8e:56:46:9c:99:
c7:8a:7d:d8:32:51:e7:78:89:df:b1:30:12:a4:78:
b7:c9:3d:04:f1:b7:ca:c5:fb:f7:7f:10:1d:80:c2:
a3:c9:72:e1:cf:26:d7:db:b7:23:c8:40:6d:d0:53:
fb:d6:39:cb:48:41:3b:d4:4e:9d:30:47:05:ef:7b:
d6:32:04:f6:df:ee:d5:b2:a0:02:4e:05:89:8e:c6:
a1:1c:37:c0:ca:b7:94:46:15:e7:e7:dd:97:f4:14:
36:d3:56:51:ec:46:ab:aa:83:ac:87:d0:43:17:81:
4f:94:dc:b1:f0:d7:a4:ac:56:25:3a:3b:78:8a:f7:
a5:e1:05:b5:ed:68:26:c5:ee:49:57:43:27:c6:02:
6f:a5:a5:79:ac:da:fc:31:67:55:52:ad:8b:dd:d3:
36:42:0f:0d:1f:38:bb:4c:44:f9:61:f9:0c:c4:e6:
6b:0d:b6:1f:55:46:e8:a6:47:d3:c3:c2:b9:87:f3:
c0:74:db:27:9e:10:b7:2a:d6:8b:eb:17:a2:48:e5:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:27:88:38:86:8E:59:70:AC:2B:2F:D7:39:19:D8:FD:A6:DB:C2
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:11:f2:aa:c5:e1:24:24:48:23:a8:96:22:75:4b:b8:60:a6:
37:eb:58:f1:0f:32:47:56:4c:cf:62:22:31:0d:cd:b3:49:a5:
93:3a:b8:70:61:49:dc:5e:22:7e:c6:76:5b:19:d5:bd:e9:5c:
a2:de:3c:63:03:c0:3d:16:69:62:4a:f6:48:fa:c6:65:7b:11:
19:27:46:29:85:07:f6:0e:20:05:85:b5:be:54:d6:bc:39:1c:
a9:49:d1:77:cb:a8:ca:8b:2f:c6:61:24:d8:73:a5:aa:d9:88:
c0:a1:04:54:cc:54:a6:53:65:8f:7c:e7:aa:3d:34:2e:58:71:
b6:cd:d3:20:6f:26:36:c8:85:e6:41:0f:2b:39:0d:d1:2f:88:
7c:30:e6:8b:53:c9:c1:a6:de:0b:63:44:58:02:97:d5:38:a5:
ee:dc:4c:ac:08:ec:5b:ef:a3:0f:6f:e0:7c:d7:19:70:d7:82:
01:17:ad:7d:91:00:ca:34:4b:c3:84:c2:3f:6d:27:a6:03:ee:
97:c1:5a:cc:a2:d1:29:9f:18:6c:d8:8f:32:60:31:2f:de:7e:
ad:2f:44:11:ef:65:33:9b:74:29:e7:7c:67:28:dd:88:13:14:
bb:11:ac:34:be:9f:b3:b6:81:d5:94:75:84:c6:be:24:38:e3:
2c:c6:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:15 2025 by rpki-client