Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: rhTJz20Pwvqr7d7Z9B9kcf4GPeaA0hN5L5zu4miRw8U=
Subject key identifier: B1:5A:18:B6:68:DE:49:7B:B2:A9:D4:58:46:FF:87:EB:4D:DC:32:A1
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0197B6A1ABA7B7065F8ADDEF4F4CA668EDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 07C5
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: bYQ2uWvq2h5u2Uj1jK2RWPwEjPU4APfklsSWKcYb0mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ab:a7:b7:06:5f:8a:dd:ef:4f:4c:a6:68:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=b15a18b668de497bb2a9d45846ff87eb4ddc32a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:74:de:05:12:a6:47:c7:83:57:6f:e0:e2:
31:4f:02:1c:6d:64:2f:40:d9:9c:5f:01:30:d2:05:
ea:20:63:c4:37:1a:6f:8c:93:cf:2c:aa:01:75:db:
0c:00:74:56:5e:37:d5:d1:4e:74:36:6a:d5:76:2d:
af:3b:db:99:e1:9e:d6:69:bd:a2:4f:fc:a0:6b:a5:
39:ed:38:4e:61:ee:36:bb:2a:6d:55:0e:2c:0a:1b:
91:76:ef:c1:43:c7:40:0c:89:b1:5b:13:2b:e6:67:
97:84:c6:cd:21:b4:a5:36:bc:ee:43:b1:98:82:8b:
ae:aa:bc:4c:4c:20:55:87:53:b7:66:bf:6f:00:60:
11:1b:17:d7:79:99:a0:3f:cf:22:64:44:df:e3:f7:
f5:2d:1f:c1:1a:6c:34:2b:f6:51:85:b0:30:30:24:
d2:10:8e:31:d1:db:15:0e:ab:25:a0:35:ba:3b:6e:
50:52:a4:93:48:5b:a3:28:94:a4:ea:56:3a:57:a3:
76:59:70:bb:aa:7a:f9:36:a0:44:c6:82:dc:d9:e2:
c9:4c:fb:6e:96:75:2b:4e:8e:bd:87:ab:04:ba:f4:
d2:da:47:35:cb:49:89:6e:0a:b3:be:59:5b:75:ce:
ef:73:a6:af:b5:00:46:a0:cc:fe:e1:ff:a9:91:1b:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:18:B6:68:DE:49:7B:B2:A9:D4:58:46:FF:87:EB:4D:DC:32:A1
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:24:38:a4:0a:73:b9:08:82:7d:b6:86:da:77:3e:e6:2b:5c:
c9:38:34:5e:e0:a1:ed:bf:8e:b3:4c:e0:33:dc:2d:d3:27:b6:
00:e4:e5:59:90:6d:dd:f4:27:aa:25:a7:5f:9a:3e:8c:31:09:
58:c6:46:64:06:65:c6:bd:e8:7b:2e:98:7d:ff:f8:cd:6b:b2:
a1:4c:46:95:ff:44:20:4e:9c:18:e1:a2:f7:eb:9c:58:9a:de:
dd:ef:11:5a:bc:f8:31:6d:34:cf:9c:5b:e4:2f:8b:3a:61:a8:
10:db:ec:67:0d:67:c8:c4:58:f4:58:05:6a:1c:bc:f8:1e:63:
8b:02:7e:3a:be:dd:98:ca:00:59:d2:0f:e3:b4:89:93:c0:e9:
1e:23:84:03:df:39:d0:2e:8f:51:5c:72:75:89:98:b6:96:75:
44:5a:0f:31:de:62:fb:25:67:03:6a:8e:97:e2:79:af:f9:b6:
1c:f3:97:88:40:83:30:7c:94:46:2a:6d:ff:a3:5c:7f:67:5a:
cd:1a:25:14:f6:92:0f:47:94:e5:c8:02:35:ae:19:9a:72:9f:
d9:ae:98:ca:95:7c:30:8c:69:af:a6:5d:ff:56:ad:45:bc:47:
4d:d1:bc:8e:fd:cf:d2:84:51:64:b8:36:61:6a:60:0a:c6:fd:
27:a7:07:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:35 2025 by rpki-client