Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: u9bSWlonaIxYi2eNyszMF19Z7E4FS+LEIJZpI4GVfxI=
Subject key identifier: 9F:B0:DF:4E:55:C4:90:4C:20:0C:19:1C:AB:50:B2:48:01:6B:D3:18
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 0198733D1C51F4F2E6998D9B81BBD02DBF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 10DA
Signing time: Mon 04 Aug 2025 04:00:41 +0000
Manifest this update: Mon 04 Aug 2025 04:00:41 +0000
Manifest next update: Tue 05 Aug 2025 04:00:41 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: djN/iD20SqSAcHV8QItNp/eCtpqdbvlK4fxpgEkYXXk=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:1c:51:f4:f2:e6:99:8d:9b:81:bb:d0:2d:bf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Aug 4 04:00:41 2025 GMT
Not After : Aug 5 04:00:41 2025 GMT
Subject: CN=9fb0df4e55c4904c200c191cab50b248016bd318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:d8:86:d6:7a:f3:e0:5d:da:4c:13:44:52:
9b:dc:67:fb:7c:12:f7:ae:e5:4c:93:3b:0f:a5:26:
56:45:4f:03:d2:23:b5:95:45:49:03:91:75:17:2a:
8e:71:6a:8d:36:b2:21:79:10:c4:44:6a:cb:b4:54:
31:b6:bc:ce:3f:f2:c0:1c:0e:1e:8b:56:c5:d7:1b:
22:f5:f1:d1:b2:9e:b1:ee:8c:03:78:44:ef:1c:12:
0c:0e:bf:b4:5c:a0:aa:70:ea:4a:cc:80:d6:9d:00:
d5:04:e9:1d:5c:97:9c:e1:db:36:59:c0:fb:38:2a:
20:14:a9:73:56:16:25:cd:6a:95:0a:ed:ce:04:00:
8c:56:82:f8:a2:4e:75:5c:ca:97:07:54:38:8e:82:
38:71:c0:4f:8b:74:a8:eb:43:ad:59:0e:dc:58:7b:
fc:7b:c5:20:c2:a1:54:9e:a4:76:71:b5:06:90:3e:
e9:c2:94:0b:21:08:3b:b0:f0:e0:2e:fb:05:98:f3:
91:62:12:2a:2e:7e:a5:04:70:33:6b:33:35:a3:08:
15:00:d3:6b:ea:0a:10:22:d4:b3:eb:fb:77:4e:40:
21:38:f7:88:2d:e5:5b:cc:31:08:9e:62:48:d0:d1:
ea:7a:19:91:74:01:77:6a:ae:31:de:e8:90:df:27:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:DF:4E:55:C4:90:4C:20:0C:19:1C:AB:50:B2:48:01:6B:D3:18
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cc:82:dc:0d:34:7c:ef:ca:3a:f7:48:42:b4:d5:c4:e4:3c:
a8:d7:82:e8:26:6a:dd:f6:12:95:f5:93:0c:b7:3a:60:64:70:
88:78:17:5b:50:25:b8:29:d1:89:87:51:33:1d:18:99:40:45:
b7:b0:06:8b:8c:ce:ba:60:6e:1e:e5:9d:83:da:42:27:9e:5a:
53:4e:0b:8d:1c:a7:03:f7:5a:b9:f4:43:6b:fc:d3:54:7f:83:
78:bb:c8:f4:83:34:8b:c1:8c:8b:cc:fe:c0:aa:65:5c:56:5b:
af:58:75:bb:1a:b7:7f:46:94:f9:25:ad:c3:51:b2:ce:b1:d3:
e9:c3:3b:67:c9:4a:f2:14:d1:13:b5:ff:d9:49:2a:09:fc:09:
0f:72:86:dc:be:52:57:ee:a2:32:2a:26:2d:c7:d4:6b:05:e1:
c2:37:e1:ba:91:8b:4e:32:21:c8:f3:a4:64:30:4b:44:28:c2:
2d:57:68:3e:ca:4d:22:66:6e:d9:b0:af:14:f0:ee:af:07:44:
73:19:36:3e:0b:62:68:d7:8e:2a:76:9f:61:6e:34:b2:5a:c6:
f2:67:69:3b:39:26:4d:70:c6:38:27:1d:f8:84:d7:37:14:62:
74:02:0f:5f:ce:24:da:a8:68:ec:d8:61:3d:40:c2:fa:3f:ab:
bf:e8:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:02 2025 by rpki-client