Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: cs61QlSn4+ygbyMD8pJMvYveepOTp6+CMbJnSJ1ird8=
Subject key identifier: 57:A1:0B:FE:D4:CF:07:64:92:91:FF:0B:0D:7E:9E:DC:E7:EF:C5:23
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0197B6D78334719F1F0E11F82B4E933C3969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0196
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: FZN4IbYJZSJAsd3isxuDaNadWRbWPdG7B2D7lqrjov8=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:83:34:71:9f:1f:0e:11:f8:2b:4e:93:3c:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=57a10bfed4cf07649291ff0b0d7e9edce7efc523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:57:64:da:57:7e:87:37:8b:64:a0:09:d1:
3b:94:b9:d3:70:64:ba:f8:de:88:f0:a4:a4:f7:01:
67:d5:9a:6b:22:26:8f:7c:0e:f5:29:30:2e:07:71:
a3:f5:d2:d3:49:53:0b:3d:43:4f:7d:8e:2b:e3:21:
22:c2:e6:14:2f:de:a2:ac:a8:cb:db:3d:f7:19:cd:
74:e9:c5:53:14:8c:23:27:8d:c0:dd:c3:45:6a:08:
13:6f:9a:19:2c:b3:98:25:8b:4b:64:c5:4d:b3:75:
af:b9:ac:99:87:86:c3:a2:4f:c5:01:d3:71:b1:95:
f7:73:b2:f8:b7:38:4a:a7:2c:c3:4f:f8:0f:f8:d6:
89:ed:62:48:a8:d0:67:cc:e4:eb:2e:e5:29:5b:c7:
e4:0a:93:27:f0:d2:b2:5e:56:ff:b5:0f:e0:39:bf:
bf:fe:f6:3e:ea:7d:5d:db:7d:9b:40:d7:72:2c:14:
2d:32:88:7a:1a:c0:98:68:01:3f:e8:9b:9f:ce:81:
98:82:d9:54:04:d8:7c:ff:44:d2:f3:22:18:e2:87:
46:76:59:3f:f5:20:e8:4d:bd:28:c8:7d:0d:3a:fc:
1c:4a:8e:9b:f8:ec:83:16:80:6d:42:fe:86:a0:f5:
bc:d6:b6:6f:ab:02:eb:40:5e:f2:46:fc:a2:13:e9:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:0B:FE:D4:CF:07:64:92:91:FF:0B:0D:7E:9E:DC:E7:EF:C5:23
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c1:d7:b0:5b:16:40:e1:a4:df:e5:1c:c9:bf:f6:1b:c0:18:
96:56:d1:e8:2d:b8:50:a5:10:ff:c5:c5:63:ad:bd:54:87:84:
97:aa:7b:a4:c7:2c:97:bd:ae:b4:00:65:ab:9b:6f:a0:6b:10:
1a:50:74:c4:2d:64:d3:a5:a2:3d:ec:6f:78:3a:f8:25:63:ad:
b3:8a:e4:67:a0:e3:bf:e8:e3:ff:2d:64:3f:fa:ff:2e:a3:4c:
1a:59:5f:96:f0:56:3c:54:e0:f1:14:ff:00:0e:55:48:a3:b5:
c5:b6:cd:54:86:a2:4f:aa:6c:df:53:76:ea:7d:08:7d:e6:a7:
4e:48:43:2a:84:aa:b8:9b:e2:09:8c:47:de:52:4c:76:ae:11:
24:2e:eb:d5:72:b8:52:e1:b5:f1:8b:0a:af:c9:fb:40:05:98:
f8:84:1b:da:4d:e3:c5:50:d8:73:b7:f2:51:75:79:73:0f:f0:
c9:76:43:b6:d0:7d:d6:a7:73:a5:e6:66:1f:d1:5f:e3:74:fb:
97:fa:a2:58:b3:77:81:51:b0:03:7f:58:31:93:f5:fe:93:da:
67:29:81:e6:bb:17:17:79:5a:27:00:fb:a4:ab:7d:ae:ec:9b:
8b:dd:95:1c:d2:74:6a:c0:04:8d:a6:d2:48:48:25:ae:c5:e0:
d9:06:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:57 2025 by rpki-client