Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: v7l9Z9XGAlKj/lBlwEXKJyq0cyjraDxaH4hsNScE38w=
Subject key identifier: 43:33:51:B1:F9:FF:E2:E1:DA:7F:A6:34:AF:35:F8:EC:F3:8A:D5:F7
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01988B0F642AF430B3C7A1B93BA9E950A504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 04D5
Signing time: Fri 08 Aug 2025 19:01:38 +0000
Manifest this update: Fri 08 Aug 2025 19:01:38 +0000
Manifest next update: Sat 09 Aug 2025 19:01:38 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: wTaLmU27n5JpHIocuv5PGt3clgLheuS1J8StkaJP/n4=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:64:2a:f4:30:b3:c7:a1:b9:3b:a9:e9:50:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Aug 8 19:01:38 2025 GMT
Not After : Aug 9 19:01:38 2025 GMT
Subject: CN=433351b1f9ffe2e1da7fa634af35f8ecf38ad5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:8c:0f:4d:aa:7d:af:41:73:44:7c:e6:ae:
79:56:5b:40:65:d2:57:d4:e4:be:91:26:19:5b:5a:
e1:f3:83:12:1d:33:04:9c:f1:3e:cf:6b:e2:62:14:
e1:6b:84:bd:51:d6:5e:fe:15:49:72:41:54:e0:65:
28:ae:f8:04:fe:fe:0a:0f:7d:f8:de:7f:b0:88:54:
73:70:9c:40:d4:a0:7d:80:e2:ff:8f:46:c3:86:cf:
dc:97:24:89:40:e2:98:8b:34:7d:1f:04:d7:81:ea:
b7:10:2a:0e:a7:d7:fc:97:ca:b9:0d:22:6f:c5:79:
61:a6:55:8b:e0:f9:f8:38:14:cc:24:70:0e:71:2c:
b5:fd:08:9c:85:a2:29:6d:32:d8:6e:7b:ec:06:dc:
6d:85:7b:42:df:0e:ca:5b:92:17:de:cf:4d:3c:69:
68:1b:c1:56:93:42:83:6d:d0:00:bf:b9:7a:5f:01:
1b:b0:2f:f6:88:a9:46:de:c6:92:a5:b8:4f:fb:e0:
f9:61:ca:8c:e1:fa:cd:7d:27:32:df:84:e1:49:c9:
9c:d4:3d:fd:ef:bf:92:0b:2f:fe:d8:7f:2a:6b:1f:
30:9d:ca:93:2b:92:0e:c3:48:b3:75:da:6e:7f:cf:
a0:62:12:23:56:34:7a:7d:d3:c2:d3:4e:aa:3e:56:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:51:B1:F9:FF:E2:E1:DA:7F:A6:34:AF:35:F8:EC:F3:8A:D5:F7
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ff:ae:88:8c:d8:42:10:0d:da:3d:1f:38:8b:67:68:6a:6d:
cd:72:9e:88:c0:b5:7a:78:71:26:f9:a7:bb:3f:43:98:fa:6f:
0a:16:7b:72:e2:39:d2:7d:cf:9d:c6:c1:35:6e:8f:75:56:a6:
6b:74:ca:16:c1:86:cc:a0:7e:7e:76:29:4f:ae:35:6f:4e:00:
11:80:34:a8:4e:97:6b:d8:86:09:6c:cf:8c:9f:21:ef:71:db:
8f:90:e6:84:ee:75:28:c3:5d:5f:2a:05:6d:64:f4:c7:2f:8f:
70:16:8e:fd:0e:09:f3:ec:a2:47:2a:d5:e6:26:6f:19:fe:84:
df:1a:5e:b9:f0:17:b1:1a:65:e8:e9:77:b2:61:d4:70:93:0e:
fb:9f:31:28:fd:c0:ce:d2:60:a2:65:bd:d9:a4:e2:55:5c:86:
7b:d7:3c:88:a9:2c:78:69:4d:1e:29:41:cc:3c:5f:ef:2e:c6:
8c:85:30:f8:da:21:52:97:46:62:de:e3:6e:1b:01:d5:a9:c2:
9f:a3:53:10:ff:46:d5:01:28:cf:58:22:90:9b:11:25:aa:4b:
63:f2:b1:b8:2e:22:5a:c6:be:ca:78:2c:f5:cb:61:82:83:1a:
e3:0e:5d:41:68:35:5f:b3:6e:52:6c:d8:f5:a8:1e:c0:af:c6:
03:8d:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:37 2025 by rpki-client