Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: N0JJEPtvAZm7oBvbTXzwJYGfT+1T2wxu1S0M8d3tgF8=
Subject key identifier: 35:C7:2C:20:CE:D7:4F:1D:FF:6F:B5:75:F0:35:75:E6:5B:3D:8A:01
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 01989411FEFD8CC8144A2635E8B1FF279EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 13:01:03 +0000
Manifest this update: Sun 10 Aug 2025 13:01:03 +0000
Manifest next update: Mon 11 Aug 2025 13:01:03 +0000
Files and hashes: 1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: CrtktgAbGdu71JqNOwBjnYFb17qOco+fV6wQ6RI+Fdw=)
2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:fe:fd:8c:c8:14:4a:26:35:e8:b1:ff:27:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Aug 10 13:01:03 2025 GMT
Not After : Aug 11 13:01:03 2025 GMT
Subject: CN=35c72c20ced74f1dff6fb575f03575e65b3d8a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:aa:88:7a:d3:7f:c9:f2:7d:8c:1a:09:d8:
15:48:76:bd:c2:01:26:84:98:4d:4d:f6:20:d5:57:
74:64:81:d0:40:8c:94:be:ba:24:ed:9f:2c:10:23:
1b:cb:92:19:80:1c:b0:2e:a8:ea:ba:ad:85:ba:19:
f7:b3:88:dc:08:c8:e2:e5:16:24:49:d1:0d:56:4a:
eb:13:a8:35:28:e9:de:02:24:75:0d:29:10:f7:f7:
45:58:09:f8:6e:42:36:93:83:cd:45:a5:f3:9e:3c:
56:01:57:5c:a3:89:87:47:ca:df:da:25:f9:d9:2e:
6d:30:a4:90:49:ed:d0:be:b4:20:45:88:f9:04:28:
9a:f4:22:b7:16:c2:e0:04:67:4e:1b:8e:df:b2:51:
75:98:c7:76:7b:d2:c2:98:9f:b0:8b:39:9d:ed:a3:
ee:8c:99:4f:9b:4b:03:a6:96:86:0c:f5:d2:24:c3:
0f:d1:d6:f7:15:ff:f6:85:19:22:0b:31:92:1c:3e:
a4:ac:e1:1f:ab:b5:e1:b1:c2:73:bd:df:d9:6e:e6:
8c:04:7b:7f:d3:00:1f:98:a0:03:70:15:85:08:8f:
b4:db:2f:be:10:c3:b6:a8:e8:95:d6:ba:3b:dd:ae:
72:35:38:9b:63:dd:9b:5f:94:f9:9f:a9:f9:d8:76:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:2C:20:CE:D7:4F:1D:FF:6F:B5:75:F0:35:75:E6:5B:3D:8A:01
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:b1:25:af:f2:60:a8:c6:85:4a:65:30:b8:f3:da:74:7a:f6:
72:b8:fa:52:c6:22:73:1f:25:d5:0a:78:87:f2:b2:70:94:cb:
da:db:15:12:0e:b3:a3:bc:88:a6:a0:45:43:55:88:50:d0:24:
be:d8:ae:1e:dc:21:fc:fa:f4:f4:1f:a5:9f:30:61:c5:e9:0f:
ea:8e:97:b8:07:28:dc:14:86:03:2d:f3:0b:b4:37:3d:de:63:
74:22:75:af:96:a5:15:4a:f8:f6:ed:d6:53:67:91:a4:c9:9d:
ef:d2:c0:7a:14:49:b9:fe:34:67:4e:20:78:9f:84:b8:36:2f:
8d:56:b4:0b:0f:99:5e:69:e5:0f:d5:ec:8c:28:b4:fd:be:c3:
96:60:98:51:e6:ad:81:f9:d6:84:87:84:eb:bd:10:c2:f0:4b:
0b:ae:87:b4:c2:49:fe:88:44:2b:54:55:c4:89:83:33:b2:02:
ff:bf:d4:fd:fc:74:1b:cc:1d:9b:87:da:44:4d:cd:4c:7b:a8:
bb:c3:cd:21:57:fc:fd:33:84:30:33:b8:d4:7a:16:aa:95:6f:
91:c1:43:dc:41:c3:b4:4f:49:18:96:70:07:c0:1c:bf:e0:b9:
bf:f5:86:f5:4f:74:72:58:77:f8:83:51:7f:21:bd:3c:06:e2:
39:e6:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:57 2025 by rpki-client