Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: dSg+FKfZs/yYWg8W5xcYsuoMWa4EeXIUzCu28fjxA/4=
Subject key identifier: 2E:EE:DF:A4:38:5B:3E:F2:3E:E3:89:D0:9B:A8:24:03:91:60:F8:84
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0197B6A07B46BAE259B8CA08A7F5835D60BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: XmFadl5Ehjcg6tBVZOf/P3TQreUkFWs5AgT04jAfm78=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7b:46:ba:e2:59:b8:ca:08:a7:f5:83:5d:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=2eeedfa4385b3ef23ee389d09ba824039160f884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:c4:01:0f:7d:40:b2:7d:3a:c1:0a:e5:64:
90:a2:1b:ef:4d:cd:9e:34:8d:77:71:fa:36:56:f9:
ee:bd:50:13:bb:e3:d9:12:26:81:b1:09:bb:71:48:
ec:23:f5:67:75:39:c9:67:54:0d:a8:d9:51:e5:f6:
5c:95:7f:60:0c:e4:14:91:b8:93:5c:74:62:64:f5:
db:43:52:d9:79:bb:0f:3d:a7:ae:bf:e9:08:a3:2d:
f8:a2:49:bd:52:64:9b:ce:81:01:f3:29:fd:17:01:
2d:00:33:a5:4f:2a:19:ae:62:bf:b3:95:96:19:12:
ed:3d:82:42:9a:bb:b6:2f:c7:f8:54:fb:80:44:98:
7e:a5:f2:5c:a0:fe:3d:66:1e:3b:3a:7d:4b:e3:b6:
eb:a4:9f:5a:ee:eb:0c:d1:4c:7a:da:93:42:0e:d8:
f6:17:a7:56:fc:b9:40:7d:15:2d:41:4f:c4:cc:cb:
2f:7c:ef:2c:b2:b7:b7:80:67:d6:58:bb:6e:35:09:
da:06:9c:92:fc:cd:c5:79:e2:b3:16:bb:48:6e:f7:
76:b1:43:13:f9:48:6f:60:f2:11:9b:0a:18:f0:7d:
b3:fe:c4:f8:86:de:08:48:65:02:31:08:40:c1:14:
1e:7c:50:bf:5d:a5:ba:9a:e2:dd:fb:0d:45:57:61:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:DF:A4:38:5B:3E:F2:3E:E3:89:D0:9B:A8:24:03:91:60:F8:84
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:ba:df:b6:a4:a0:d9:3c:6d:48:4e:6b:66:9b:35:63:2d:
e4:c1:b5:a1:ce:c0:5c:ed:25:65:16:b3:4f:88:17:fc:4b:f0:
c2:49:ac:0c:54:ef:41:c9:d7:2a:f6:c9:4d:42:1c:9f:02:1b:
e0:8f:8b:af:da:77:7b:ba:7a:9a:28:e1:f0:c7:96:a0:cb:57:
73:8f:ea:b7:5b:c6:27:87:a0:a8:8e:1a:f4:fb:cf:f1:83:f6:
38:10:cd:31:64:cf:93:42:eb:4f:f5:14:59:28:4c:2f:92:06:
ad:ff:2a:0f:25:90:2a:5d:18:75:5d:4d:6a:cf:67:a7:7c:90:
27:23:30:92:f8:b2:a1:97:fd:d8:66:63:70:1a:58:bd:6e:58:
8c:34:0a:22:4d:ef:16:06:aa:72:e3:b8:cc:7b:9d:42:5a:ce:
82:8c:1a:5b:0c:99:68:6b:a7:cc:1d:c8:c8:11:9c:af:d7:45:
8b:0c:20:33:fb:8c:7a:2e:6e:67:17:55:7c:bb:46:d2:38:80:
96:2a:3c:4a:51:32:17:53:31:fb:a9:7d:50:38:2a:b2:fe:52:
32:19:cb:d0:fc:d5:bd:a2:15:3f:33:80:7f:27:e5:a3:e4:9d:
c0:3f:8b:0c:d6:6d:17:cb:cb:c9:4f:0c:2d:a5:8b:21:70:dc:
41:db:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:27 2025 by rpki-client