Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: cYvHjDHl+2lywRti7wZ8Sdv4QY5b154q8xcWhjWknh4=
Subject key identifier: 7C:9E:92:A9:F4:F6:2C:17:EB:E4:08:12:5D:8C:7C:35:51:1D:89:DA
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 0198880D583D90BA72E7DF56C1C6B9839AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0C28
Signing time: Fri 08 Aug 2025 05:00:32 +0000
Manifest this update: Fri 08 Aug 2025 05:00:32 +0000
Manifest next update: Sat 09 Aug 2025 05:00:32 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: bwKWjIupj2/dP4Y0EzGlpZ+2iUGC/fZDb7MOiCbATbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:58:3d:90:ba:72:e7:df:56:c1:c6:b9:83:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Aug 8 05:00:32 2025 GMT
Not After : Aug 9 05:00:32 2025 GMT
Subject: CN=7c9e92a9f4f62c17ebe408125d8c7c35511d89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:be:6d:ee:64:6d:e8:37:7e:32:fa:c4:51:
f9:1e:d3:a0:ab:fa:8d:46:18:02:85:e4:d6:3b:33:
a9:11:88:e3:72:7a:c3:0c:bc:a4:3c:16:15:33:74:
48:10:77:e0:bf:c7:b1:fd:41:c0:76:78:21:16:bb:
e0:1c:14:87:9f:2e:16:0f:2b:13:b8:37:8c:ce:e1:
da:85:ce:59:3e:28:c5:d2:6a:78:21:0e:6d:5f:d2:
2c:d9:91:17:09:01:30:32:c5:ce:11:10:5a:67:14:
8a:9c:cb:30:8d:88:e8:4b:bf:e2:de:6f:a5:b2:77:
2d:b4:7a:68:92:8d:d2:32:32:44:d7:a5:e6:05:4b:
69:12:b2:8b:66:4e:bd:44:53:9a:d9:66:cf:fb:22:
56:60:5c:38:2a:55:ad:87:63:8c:66:da:b0:fd:91:
cf:80:59:b5:df:ac:34:5c:97:9a:b9:95:d5:24:1f:
91:30:14:b3:0d:04:af:b1:bd:bd:e9:90:e8:5d:58:
9a:29:49:05:b0:b8:f1:c6:84:b3:37:82:3f:93:84:
5d:3b:ea:1c:e6:6e:68:40:e0:fc:99:4d:f9:cd:3a:
23:ac:c5:20:d9:38:44:64:69:30:77:99:13:a5:a8:
db:bd:4a:f4:91:05:e6:30:d1:e0:7d:6c:77:62:56:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:92:A9:F4:F6:2C:17:EB:E4:08:12:5D:8C:7C:35:51:1D:89:DA
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b2:28:d5:9f:03:14:d8:98:e8:1d:92:6e:6a:d7:da:1d:40:
13:a9:e2:0f:5c:04:8b:ae:81:0f:3d:29:fe:35:a1:94:d6:f5:
c4:e8:e9:f8:51:d8:1b:df:dd:17:31:0c:bd:8d:25:95:74:95:
3e:e9:d0:14:e2:fd:fc:78:0c:34:ad:e7:76:fe:7b:3b:58:a9:
72:5e:09:87:94:79:5b:07:ed:83:0e:a6:15:ec:b4:53:c7:64:
f1:3d:7e:3f:62:37:59:76:93:ee:48:e9:f9:1e:75:50:a7:6f:
11:4c:4a:ac:c9:39:dc:b3:9a:b3:72:fd:dc:09:e7:39:da:89:
b0:4d:1d:5a:f0:91:8b:4a:8c:e1:16:f4:5d:9b:5c:75:13:54:
e7:20:7b:68:7f:f2:63:18:0f:99:4a:06:db:69:2b:98:8a:47:
8e:e7:35:81:1f:7e:5f:e6:ee:45:17:71:84:06:43:6c:1d:16:
25:bc:fd:13:f5:1f:11:f6:f4:e1:75:86:19:53:34:10:b9:be:
82:87:39:08:75:df:46:20:28:a4:57:ab:06:00:af:eb:a9:17:
97:bd:a7:54:93:01:96:20:84:07:0a:17:a3:72:58:e5:13:c5:
8f:d1:fc:1e:65:4a:44:0d:7c:94:dd:ad:37:df:cd:71:92:aa:
cf:cb:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:21 2025 by rpki-client