Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: 5Av9PyNNNDVjh6SdcJxycegu5qlX6b91dq4Nn/p1oK8=
Subject key identifier: 35:0A:92:0E:80:04:77:B4:06:29:3B:41:2F:9B:FF:FA:15:15:6E:01
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019873066F160BF8D19DCAB229759A62A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1138
Signing time: Mon 04 Aug 2025 03:00:58 +0000
Manifest this update: Mon 04 Aug 2025 03:00:58 +0000
Manifest next update: Tue 05 Aug 2025 03:00:58 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: GkHvC+1OVZa8bCTY1h0z1KfjwCziMfmcI6yXkhL+t+Y=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6f:16:0b:f8:d1:9d:ca:b2:29:75:9a:62:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Aug 4 03:00:58 2025 GMT
Not After : Aug 5 03:00:58 2025 GMT
Subject: CN=350a920e800477b406293b412f9bfffa15156e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:4c:e6:5d:2a:42:c6:14:b8:56:39:89:d5:
88:55:7b:1b:0d:8f:3f:a1:61:23:7f:74:dc:71:3d:
1b:1a:d8:5e:a4:95:ea:9e:88:37:76:7f:5c:9d:e5:
ba:f2:ef:53:d9:47:79:1d:f8:a7:d7:f9:d5:d0:b1:
e8:8f:74:b9:1c:20:c5:26:5c:17:63:99:1b:a3:8b:
48:aa:70:77:2d:32:cf:c1:e0:32:80:94:72:b1:a5:
ec:60:aa:d0:b6:f1:7b:65:44:e5:3f:b8:4c:18:15:
d7:dc:12:7a:40:e8:9b:0c:83:9d:64:96:1d:24:44:
f2:87:e2:66:e2:ed:4a:a4:d9:77:bf:6b:59:c6:75:
0f:82:58:65:2e:25:0e:c5:03:bd:dc:27:16:57:d6:
ca:b7:97:8b:b7:27:10:da:96:ea:61:d2:5f:49:e4:
d3:2e:b2:a2:00:3b:1a:99:75:c7:58:c8:7e:88:25:
e5:31:9e:ea:d5:73:3f:62:6a:29:33:b6:87:2b:c2:
d5:00:c8:6a:5a:e7:77:f3:e3:a9:e0:aa:25:73:84:
99:64:8f:de:b4:57:d4:70:5e:46:72:92:44:77:6f:
6a:4b:09:2f:9b:9f:92:c2:60:f2:53:1f:4f:dc:7f:
a0:1c:98:5c:02:e3:c4:c7:24:72:f9:dd:a7:33:87:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:92:0E:80:04:77:B4:06:29:3B:41:2F:9B:FF:FA:15:15:6E:01
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:55:57:01:a3:7d:45:18:9f:54:8b:b1:85:ff:be:26:32:6a:
a8:6e:51:79:14:c1:19:b0:03:34:6f:e4:8b:99:ff:76:c3:e7:
c8:9a:05:2b:c7:40:eb:a0:06:e8:12:cb:79:a3:40:b1:8c:6e:
17:0a:03:27:5f:a1:47:a4:2a:48:3e:b8:ea:cd:1c:8c:50:ac:
8c:13:16:4b:10:a3:5a:53:36:ec:22:f0:b1:7d:cb:c9:8a:f0:
1c:50:2c:92:a8:e7:cf:02:d4:cf:b0:b2:03:89:9c:94:d5:81:
eb:06:5c:1d:ab:6c:f6:b7:f5:2a:6f:6b:0e:e9:75:6a:3d:a9:
25:fa:4c:0f:74:d5:b2:e6:5c:ba:61:ab:bb:d8:06:ad:9a:75:
3a:16:e5:46:a8:d3:9d:31:6b:6b:41:7f:a1:a1:2e:a8:14:80:
df:04:4b:d0:34:81:92:fd:f8:91:59:c0:c7:c8:14:b1:5d:f4:
35:5a:54:e3:47:60:a2:8b:30:b5:a7:dc:15:8e:93:5b:57:0d:
8c:7d:a0:ac:1a:28:35:43:07:ae:8b:ca:7a:71:f6:c2:5c:31:
c4:da:eb:40:79:87:12:54:10:ec:6b:23:5c:1b:76:97:ba:e5:
83:1a:89:a2:f4:49:76:fb:e0:c4:14:52:b8:a9:80:aa:da:1f:
e8:bd:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:07 2025 by rpki-client