Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: 1t4CQ8JTdAyHvdYGtj3zdkbyuD5OJa2eOLzPnZyLdCI=
Subject key identifier: 54:88:28:1D:87:76:32:49:A9:F6:BB:E8:6C:E3:0B:F9:5C:10:36:A3
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 0198952484A7AEBBF00233C912B53B82F76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 1336
Signing time: Sun 10 Aug 2025 18:00:55 +0000
Manifest this update: Sun 10 Aug 2025 18:00:55 +0000
Manifest next update: Mon 11 Aug 2025 18:00:55 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: 3Lp8zB89apg+is/8cjL7YfWOUbAIZ4JZgPB3dmn5vPQ=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:84:a7:ae:bb:f0:02:33:c9:12:b5:3b:82:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Aug 10 18:00:55 2025 GMT
Not After : Aug 11 18:00:55 2025 GMT
Subject: CN=5488281d87763249a9f6bbe86ce30bf95c1036a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:35:e1:9a:c3:ba:f1:3d:3d:e3:26:1a:8d:73:
d6:35:05:40:b2:41:41:57:ad:bb:9a:f5:8d:1a:6b:
d4:8e:a0:00:c8:48:d7:f2:35:58:7e:90:b4:53:9d:
dc:14:b1:c9:52:3f:78:e9:5c:ca:ad:58:76:1d:ed:
f2:ff:1a:37:68:cd:08:3b:2b:8e:ff:2e:b1:3b:a1:
b0:b9:30:f8:5e:11:9f:20:3d:63:e4:9e:1c:bf:d0:
b9:bc:51:d8:96:f6:d5:80:78:e7:46:78:f9:cb:a7:
38:a8:11:4c:41:cc:74:1a:c3:5b:ee:e2:f6:ee:26:
c3:86:80:ab:f4:22:33:f9:e2:a2:78:b9:48:76:76:
21:45:7a:50:31:d8:36:35:cf:2e:47:59:3a:ae:2d:
34:9d:8b:f3:b2:97:00:5a:f2:b2:4c:aa:d2:e0:58:
5d:89:50:03:d9:f0:05:8c:f8:d3:e8:d3:e6:3f:2a:
6e:76:02:bb:36:22:fb:f9:d4:d7:9a:d5:aa:09:15:
6a:d2:3e:53:3c:34:69:f8:95:f9:79:d0:0d:04:1c:
cf:66:ed:00:19:04:47:99:b4:14:d6:e8:b8:07:f0:
0d:bc:f1:b8:3c:e7:a6:ac:c4:dd:04:df:2d:23:3e:
4a:b6:47:70:96:d9:7a:70:a4:7c:1d:65:9e:05:94:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:28:1D:87:76:32:49:A9:F6:BB:E8:6C:E3:0B:F9:5C:10:36:A3
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c9:44:1e:66:a9:b6:fe:77:11:29:41:7d:1a:a1:2a:77:4c:
ad:80:76:f5:27:6f:b0:3d:36:35:05:b4:8e:3f:ae:dd:da:a5:
92:7f:64:26:44:03:31:7d:e8:c6:0e:dd:6d:f7:d9:6a:0d:0e:
1f:96:a3:e3:24:87:1e:ba:48:09:4e:39:bd:f1:f2:50:8c:81:
5c:e9:36:98:0a:76:fa:08:f7:14:a5:5f:b0:9b:02:af:3c:18:
37:ab:67:69:95:56:ff:17:c7:69:df:0e:e6:ce:9f:d6:c5:f8:
71:ed:f2:ee:12:df:83:69:71:22:38:18:c1:59:4a:59:94:21:
4f:9f:51:dc:4d:2e:be:e9:e0:86:4e:c9:b3:ec:ea:73:e8:e6:
54:3c:a1:9c:86:76:20:ec:49:09:ec:f9:a3:aa:5b:a2:0d:ac:
b6:eb:da:56:3e:80:e8:f1:db:df:a5:33:e6:6f:d3:f9:33:fe:
c0:44:7d:23:0c:61:26:61:e8:bb:dd:fc:69:31:69:87:48:af:
55:22:4b:2f:a1:6f:1d:5e:33:14:1e:b3:cb:5b:74:c8:7f:12:
a8:34:fc:10:de:6d:1a:d1:a2:ec:b5:e4:e3:0b:16:3e:8b:23:
e3:22:da:5c:2e:47:8c:66:67:44:3d:e7:59:7e:6e:8c:d2:76:
7b:28:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:03 2025 by rpki-client