Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: vXTz+5qF0Q5NAWIyzjXImKkBbprmDqamKwlqm/Z5ssQ=
Subject key identifier: 82:63:F7:64:47:4B:70:A0:67:87:16:48:08:B5:0F:33:51:0A:68:58
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019897814AC299F4265F9A60AA73651E3791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:01:29 +0000
Manifest this update: Mon 11 Aug 2025 05:01:29 +0000
Manifest next update: Tue 12 Aug 2025 05:01:29 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: LJ9YrLk0LcU3kPHIldjVxWDgzG1u3Tz6rcQuoLqA7YA=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:4a:c2:99:f4:26:5f:9a:60:aa:73:65:1e:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Aug 11 05:01:29 2025 GMT
Not After : Aug 12 05:01:29 2025 GMT
Subject: CN=8263f764474b70a06787164808b50f33510a6858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:6f:b2:68:b8:07:fa:fb:37:ea:d0:32:00:
99:db:79:bc:18:76:f2:a2:25:aa:9b:3b:07:bc:9d:
2b:5f:e3:4a:09:9c:ff:8d:9d:61:63:c1:8c:5e:85:
aa:70:fa:31:b4:d6:e0:13:d9:8a:d7:51:68:ac:c9:
a0:89:66:10:ea:f4:b8:90:83:6a:c7:a0:dc:51:12:
65:c4:a7:11:b7:00:d3:98:90:75:ca:43:ab:5c:4d:
ec:34:56:a1:a7:93:f1:85:da:e7:e7:a6:fb:0b:71:
5c:5b:f2:59:c8:75:df:23:2c:59:d4:34:73:3a:8c:
f1:22:4c:9f:d3:27:88:11:91:35:24:21:8e:f4:74:
e4:5a:ad:5e:8a:93:a7:61:7f:9f:9c:33:c3:a4:9a:
23:d2:67:d8:01:c8:31:9a:81:a9:fe:f6:b1:c8:2d:
cb:f3:8d:d4:b4:2e:dc:2a:41:75:f3:d7:a4:9a:8d:
21:73:26:de:34:70:a3:c2:2b:b8:fa:f7:54:49:82:
c9:b6:ae:3b:83:99:82:0a:19:7d:b6:a0:2b:68:88:
ec:82:87:d8:0f:d1:f6:fe:59:e7:c6:e2:ec:8f:f7:
69:b4:0c:eb:44:ee:38:3d:2e:2d:40:29:77:92:dd:
be:ce:f7:af:0a:0c:39:46:16:2f:da:b0:ff:9b:18:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:F7:64:47:4B:70:A0:67:87:16:48:08:B5:0F:33:51:0A:68:58
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:0d:97:96:73:24:2f:60:2c:4e:39:f0:7f:5a:2c:5e:b8:
5c:df:7e:0d:d8:1b:13:80:c3:8a:1f:d4:b9:d9:91:af:76:6a:
01:e0:dc:71:aa:1b:ab:44:ee:e3:77:5e:4a:21:8a:8a:c3:e0:
0b:24:ef:56:c0:58:fa:47:fa:81:11:ed:6f:e5:ef:cd:d0:f9:
0d:57:50:57:cf:8d:aa:1f:ce:62:3b:2f:ae:b3:49:47:70:68:
b9:b4:ff:61:e0:bf:d5:07:85:2d:54:cd:66:b1:fc:21:89:d7:
e8:5f:fc:7a:0d:e1:e3:15:f9:90:5e:bf:4e:e6:ae:84:3d:8a:
84:53:4d:74:c5:6a:48:b2:92:93:0f:70:c0:fa:62:9a:6c:f1:
90:55:e4:c2:c6:c3:60:14:1e:07:51:99:4b:7d:45:f6:9a:fc:
22:24:64:a5:c7:6d:e2:8e:80:3a:6f:99:52:0d:7d:b7:af:ab:
97:92:c5:80:03:b7:41:af:e3:7c:60:b1:ae:1c:6c:71:0d:8b:
86:89:25:06:5e:16:a1:d0:b4:38:9d:d9:4b:80:7c:c1:b9:ab:
11:e9:d4:23:b7:e6:f3:ce:a2:47:4b:14:62:fa:12:f7:39:a2:
ce:d1:bb:e8:8d:f7:1e:38:52:d6:3b:89:04:10:5a:6a:96:71:
1a:39:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:28 2025 by rpki-client