Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: Z2TYiBxlnSuqm54jVDUdkZk327W8a3dnxYmYto9/PN4=
Subject key identifier: 2B:F4:12:C2:AE:11:53:1C:CB:83:E1:CF:21:67:F5:C5:03:B8:6E:4D
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 0198A04CD1A4388B597C7D70733843E32EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 4E
Signing time: Tue 12 Aug 2025 22:00:45 +0000
Manifest this update: Tue 12 Aug 2025 22:00:45 +0000
Manifest next update: Wed 13 Aug 2025 22:00:45 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: 1OqwmYm6y55DgWOJOfD8olJU5ZTFTqMiHBNceRoIdLc=)
2: O55FnDiUhMsPTi6hjIewBuX7Ta8.roa (hash: 3JNSAI/aVMRICcZVLh9uXFKqAHc+rCKXfwm9TEvUz2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:d1:a4:38:8b:59:7c:7d:70:73:38:43:e3:2e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Aug 12 22:00:45 2025 GMT
Not After : Aug 13 22:00:45 2025 GMT
Subject: CN=2bf412c2ae11531ccb83e1cf2167f5c503b86e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:9f:5d:c2:d0:ec:cc:b3:02:73:85:be:f3:
72:d7:63:9a:72:1f:b2:5d:ab:c2:06:8e:9a:94:db:
f3:f9:91:59:a9:77:38:eb:47:7c:5e:ad:75:c8:65:
de:5c:ba:c9:2f:86:4d:dd:db:cc:d2:52:d6:5e:38:
50:20:7a:1f:29:f2:d2:7d:8d:b9:9a:dd:2b:16:b2:
c4:0a:bd:d9:95:89:1c:ce:07:d9:52:6d:cd:0e:d2:
6c:04:07:72:3e:c7:b4:2a:b0:61:dd:d9:56:42:da:
fb:9a:16:4e:35:5a:3b:39:9f:3b:9b:e8:94:9d:92:
c6:90:f8:79:36:25:94:04:e2:e2:36:f5:68:ea:a6:
cf:19:a6:0d:2f:f4:73:81:5c:d1:6e:2a:0c:de:ef:
19:d0:8b:c2:f0:49:22:bc:b2:aa:e6:8d:c2:9e:96:
4c:68:fd:ae:17:56:ae:5b:bd:6e:f8:3d:3c:f0:a6:
b2:bc:70:c7:96:88:a5:4f:27:5f:d2:a1:c5:d2:db:
28:65:70:7f:fb:3d:92:29:d9:56:c4:e8:90:ea:65:
12:21:9d:c3:a1:07:34:cd:6e:47:be:3c:ea:aa:31:
33:48:ff:b7:04:68:02:ac:57:37:ca:2d:1e:02:b2:
8e:1c:c1:e3:94:e6:0d:7d:dd:d2:ab:e0:65:ae:60:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:12:C2:AE:11:53:1C:CB:83:E1:CF:21:67:F5:C5:03:B8:6E:4D
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:b7:6e:e5:57:80:9d:11:0b:0b:5a:01:04:18:00:c5:4e:
2c:a2:b3:c6:01:5d:37:d1:d4:76:12:ac:50:d4:73:20:b9:22:
33:84:d1:9c:ee:32:a9:3e:f0:2b:42:db:ce:46:ff:27:12:ca:
1a:8f:c7:cf:b4:3a:aa:3a:b6:b3:22:76:83:99:ad:54:e9:22:
cc:a4:fa:c2:3a:16:1f:c0:7a:c0:66:f6:67:6c:61:ac:f6:c6:
76:0e:dd:c5:e1:47:37:aa:e0:10:94:43:b0:ea:76:2f:6b:05:
30:85:cb:39:97:2a:df:d3:c5:f1:ae:1c:f0:6a:0f:40:6d:53:
0c:21:ca:65:d1:cd:4d:f8:13:7f:63:67:50:7d:1e:7d:a5:33:
a6:63:fb:87:5e:01:f8:7e:d5:46:79:cb:1e:27:a7:0b:7b:3f:
a5:55:83:15:80:57:19:1e:58:fa:8b:f0:fe:bf:59:f3:cc:15:
60:cb:d1:81:87:75:f7:24:91:b6:26:59:4a:6c:3a:4f:5f:ac:
53:ee:54:56:f2:ec:cc:a1:77:dd:11:4e:a6:f6:ca:87:a4:15:
30:1d:c3:c9:33:3a:08:ca:9e:52:df:ff:d7:fe:8c:90:af:46:
4c:7f:e6:5a:d4:3f:6d:94:66:71:6c:d1:66:81:83:31:f3:96:
5b:9f:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:16 2025 by rpki-client