Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: BKdez1U6DTlui/U+FpnBJ8UEGMJJwYF9TbXf20jnC7k=
Subject key identifier: 62:4B:39:B0:B4:21:84:CA:B6:66:80:DC:A9:49:2E:9A:9A:00:97:18
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 0198820BC3A36A1200AE4291BA0EF284B27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 01:01:05 +0000
Manifest this update: Thu 07 Aug 2025 01:01:05 +0000
Manifest next update: Fri 08 Aug 2025 01:01:05 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: nkIKl8TtyU9fOavqBpt0/BwWovA1UEBXdcXcan2SchM=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:c3:a3:6a:12:00:ae:42:91:ba:0e:f2:84:b2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Aug 7 01:01:05 2025 GMT
Not After : Aug 8 01:01:05 2025 GMT
Subject: CN=624b39b0b42184cab66680dca9492e9a9a009718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:6b:97:4d:36:ec:73:5e:bf:c0:55:5d:25:
f8:28:41:85:e0:ce:00:9c:3d:9e:ce:ec:c4:04:17:
37:6e:1c:eb:ef:8c:68:c2:a9:dc:7f:f9:d3:da:44:
b2:dc:55:37:bb:a1:03:a1:a3:db:48:41:38:0d:96:
9d:ab:17:fc:69:f6:4d:e9:73:a5:4f:53:01:75:ed:
19:71:3c:fd:49:ea:dc:5e:4b:77:47:a2:d4:4b:61:
69:87:b1:b6:d4:f3:b5:29:9a:92:06:ec:9e:a4:ea:
12:f6:a0:10:eb:2b:37:f8:7f:00:a2:4d:0b:4b:85:
39:bf:4d:3b:d9:13:8a:69:d2:3b:ed:b8:7d:7f:8e:
27:04:d8:c6:d9:ed:f0:2a:05:dc:94:6f:c0:a8:a6:
ed:c1:84:01:3d:cd:5e:80:5f:98:f5:34:9b:0d:03:
4f:7c:22:88:b0:1d:32:56:14:a6:40:fc:62:7f:d5:
15:88:b6:af:f7:b0:2a:23:83:ac:61:f2:63:6b:75:
a3:4e:8a:1a:fa:23:17:b6:ed:d8:8d:3a:35:2e:c7:
10:47:95:1d:13:ae:45:05:a4:c0:81:a2:ed:d0:f9:
f6:e7:6b:a3:43:01:84:00:41:a1:1b:39:41:23:36:
3a:55:02:86:9a:69:d1:78:5f:3f:6a:ad:f2:df:54:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:39:B0:B4:21:84:CA:B6:66:80:DC:A9:49:2E:9A:9A:00:97:18
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:22:47:03:c2:f7:e1:4c:2b:08:88:e0:b4:a8:e6:be:4c:ca:
d6:77:a8:9a:3d:a4:0c:79:c8:f3:c3:36:1b:a2:e4:ba:b0:48:
29:05:e8:6f:ee:84:73:cf:43:55:b9:62:54:9f:e9:62:10:c3:
2c:c1:6d:a1:01:b8:84:92:c4:92:45:52:7e:f1:fd:34:2a:1f:
e3:61:36:e0:c4:4a:6a:2c:3d:9b:2d:65:12:8e:6e:db:25:11:
2f:5d:6e:01:f1:14:80:56:6c:a5:12:a5:5d:8f:50:a1:43:5f:
8e:2c:8e:f8:5a:99:b8:4e:66:f8:aa:a2:5d:02:0b:eb:c8:cf:
c2:02:a6:3f:85:86:b1:41:58:7c:29:09:53:58:ad:2c:e1:a3:
e3:06:f8:43:05:05:cc:da:6b:fc:91:09:48:cc:45:57:5a:51:
32:2f:4b:bb:ed:a1:eb:46:1d:34:86:ab:42:eb:62:7a:c4:4e:
d0:f9:d7:ca:49:67:19:7a:0b:28:91:c8:08:87:af:55:22:80:
fd:22:2a:57:16:21:71:5d:ca:18:81:06:e8:32:23:b1:e2:4b:
ad:ef:d9:47:82:5e:45:01:77:65:aa:7c:59:85:fb:30:98:ad:
97:bf:74:f3:33:6a:e4:81:85:4c:fc:5f:f8:e4:25:97:21:0d:
55:b7:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:23:05 2025 by rpki-client