Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: FmCbnDD2CeBV4dCWbGxJTqD/ZVp9fyh/SfHzUY7q0aA=
Subject key identifier: 5E:72:FC:B8:A3:6B:63:C3:7C:EB:5A:A4:6B:87:9F:03:D4:2D:F7:EE
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 0197B96B101268A131BE3DDC287947F8A429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: UhI1B8Z1agMD2s+0g7+sphod0aMYDEUszjR2dWbl4xY=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:10:12:68:a1:31:be:3d:dc:28:79:47:f8:a4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=5e72fcb8a36b63c37ceb5aa46b879f03d42df7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:1a:c9:65:72:dc:77:df:84:ce:17:18:20:
3c:b7:e0:8b:88:41:7a:11:f9:0a:cd:35:0f:99:55:
d6:fd:00:8e:0d:87:5a:c3:4c:80:b9:7d:4d:9a:9b:
67:e8:f7:fd:37:06:bd:cf:52:80:ca:93:c6:17:01:
be:1f:a7:24:7a:80:69:f3:ec:da:2a:ca:2e:18:94:
9a:14:db:bf:62:bf:f5:78:f4:b7:9a:1b:09:00:e4:
5c:bd:83:e0:a0:b0:63:43:e7:dd:90:31:94:37:7a:
8b:c8:47:0d:5b:5f:8b:de:7b:f6:87:14:40:64:68:
00:ce:66:5b:27:43:ff:13:2c:bc:bc:76:3b:17:7f:
74:6b:40:de:19:85:7a:eb:ee:03:87:55:b0:25:df:
04:4d:6a:cb:38:54:97:72:88:b9:42:64:b8:c4:8a:
44:5a:5f:50:87:ab:5a:92:c9:cb:de:8c:fb:3f:e3:
bc:d5:dd:b5:95:79:4a:18:5f:e6:ed:b6:ef:13:87:
8d:74:43:d9:26:a0:38:c5:44:b3:0c:3c:d0:d1:4f:
05:dc:11:b7:be:e8:70:28:4b:7c:59:ae:e5:c3:1e:
23:29:45:46:8e:29:92:42:9e:12:29:ee:93:df:8a:
28:c7:01:4f:9e:b7:3d:50:46:49:01:6c:d0:68:77:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:FC:B8:A3:6B:63:C3:7C:EB:5A:A4:6B:87:9F:03:D4:2D:F7:EE
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e5:7f:71:73:8e:38:01:68:61:86:9e:60:e5:25:22:d0:a3:
71:5f:fc:ac:b4:7f:7e:e1:00:cc:f1:90:d1:79:a0:0f:ee:53:
38:30:25:06:88:ed:aa:f5:b4:fe:f2:cc:6d:5c:88:57:ed:e9:
3e:d4:8e:f0:17:18:c3:a8:a4:9c:c3:ee:a9:0a:4f:b0:b1:5c:
fb:c2:9f:30:f4:e9:66:81:34:da:fc:22:33:60:8e:76:ef:c8:
52:6b:ce:24:48:0b:c5:d9:85:69:60:64:03:fd:7f:78:20:33:
24:c9:f4:e1:16:05:48:0f:c9:7a:6d:39:33:ea:d7:9e:07:38:
d0:5d:76:15:83:6f:bc:75:6c:2a:32:6e:fe:9d:6d:a3:01:b0:
75:da:b4:0f:99:0e:9e:9e:ba:9d:80:ea:bc:1f:e4:3b:46:3c:
48:f4:aa:0a:62:d2:28:f2:e4:0d:4b:e4:8a:ce:1a:0a:7a:da:
b3:9b:b2:63:03:16:6a:29:0c:16:2f:29:83:7b:da:51:84:3f:
0a:3a:f2:ef:c8:fd:dd:df:69:3d:2d:09:fa:eb:4c:e6:63:75:
d1:47:92:93:ac:4f:5c:19:99:5e:77:88:b1:e6:b0:dd:16:d1:
7c:0f:18:0f:99:30:a7:1b:ab:4d:1b:85:66:8f:21:da:3f:3f:
63:81:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:07:22 2025 by rpki-client