Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: tfVjvHGBeaOHG5VOjxZuDmjfP6Qq27n9FIccPJSxTqw=
Subject key identifier: 97:AF:01:6B:C9:1A:0E:F3:8C:F3:36:50:97:8B:35:F3:FD:21:81:6F
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 0198876929C070E9D2E2380D7CBD7321BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 028A
Signing time: Fri 08 Aug 2025 02:01:12 +0000
Manifest this update: Fri 08 Aug 2025 02:01:12 +0000
Manifest next update: Sat 09 Aug 2025 02:01:12 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: eJHYLzWAM4jpq1YUOaT7Q/UBMAyG+5K+GvIszujWPBY=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:69:29:c0:70:e9:d2:e2:38:0d:7c:bd:73:21:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Aug 8 02:01:12 2025 GMT
Not After : Aug 9 02:01:12 2025 GMT
Subject: CN=97af016bc91a0ef38cf33650978b35f3fd21816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:b7:78:5b:8b:b9:bc:fa:97:4c:9a:a2:a2:
aa:ba:ed:3a:c0:39:5d:1e:b2:4b:ed:a1:c3:05:ea:
d3:42:bf:1f:41:26:55:95:b3:bb:b3:61:a8:b4:82:
1e:87:a4:f0:db:0c:45:bf:30:4d:8b:62:f4:6e:e1:
06:b9:83:8a:c2:8e:9b:79:9f:23:5a:e2:68:c9:f8:
e9:49:ea:8b:12:1e:4e:4e:33:1e:87:f6:15:f3:5b:
d9:48:58:bb:8a:f4:e5:6f:ad:a2:2e:3d:15:9f:a1:
b9:3c:f3:70:5e:7f:d4:26:f5:db:11:c0:11:09:23:
44:88:36:c4:81:75:22:12:78:01:44:db:40:da:d5:
88:70:81:19:ab:2f:b8:86:09:6c:2f:dc:fd:d7:17:
6b:3e:1b:6a:65:1d:b6:ab:cf:5f:c2:72:fe:49:5b:
49:93:b4:d7:f8:2f:32:b6:c5:f1:e5:51:37:3f:a8:
55:b4:52:d7:f1:50:51:a0:86:95:0c:4e:b3:72:a3:
eb:36:d3:ac:51:e4:6b:8b:16:da:d3:3c:ee:06:33:
36:de:ba:10:53:50:17:4e:50:06:1b:4d:6d:1e:fe:
ff:46:97:fa:95:5c:fa:da:78:35:ac:2a:9f:6a:2f:
8e:5d:b9:cb:a7:c4:0a:3a:e2:49:71:91:58:06:d9:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:01:6B:C9:1A:0E:F3:8C:F3:36:50:97:8B:35:F3:FD:21:81:6F
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fd:1a:f9:fd:31:30:c6:9f:5d:80:ac:0e:eb:d8:0c:b9:d3:
64:4f:69:3a:04:a6:ef:73:24:da:d8:a7:cd:3a:26:c3:6f:2b:
91:a9:f9:22:84:b1:dd:73:9b:36:e2:a5:74:3f:01:c2:73:95:
8f:c6:07:c4:f1:7e:11:66:6e:07:73:79:d1:bd:7d:bc:fa:13:
5d:8c:aa:2c:c0:b6:4a:fc:f6:b3:25:6d:f9:da:09:20:bc:e0:
4e:d1:9d:1e:72:3b:b9:42:2c:73:0e:3d:98:bb:a5:eb:d7:8d:
c8:f3:ac:83:f9:15:01:c9:9e:96:32:7b:9e:14:bc:a3:6c:81:
73:70:45:a0:23:b8:51:56:62:fa:8a:6e:64:2c:26:f1:0e:d1:
5a:57:44:56:63:7f:a0:80:f0:b6:61:13:63:41:cd:a3:9b:71:
ee:38:4a:eb:ca:40:bd:d9:1c:99:bc:c3:1f:68:9c:05:aa:93:
ce:d4:e0:1d:b1:bb:b2:2c:63:75:a6:2d:b7:47:e3:f9:80:2d:
8a:a5:0b:71:34:a4:03:c1:63:2c:33:54:5e:b4:38:f9:e4:36:
e8:b9:79:59:4e:40:5a:6e:b0:73:a7:dc:a6:74:39:6f:cb:5a:
3c:52:cd:12:ab:3c:9c:f4:62:6f:a7:45:b2:9b:c1:ab:c8:c4:
91:e1:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:24:15 2025 by rpki-client