Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: 8B1xTifo0KGcOhAB+M6MSVTELddUccbWLFfZtEkNGBE=
Subject key identifier: FB:32:B5:FB:EC:B1:FF:16:06:3A:AA:78:2A:E7:C1:7B:97:A1:8F:F0
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019892FF6CE62FEBE3DBACFD8FF6301E1FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 08:01:09 +0000
Manifest this update: Sun 10 Aug 2025 08:01:09 +0000
Manifest next update: Mon 11 Aug 2025 08:01:09 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: 4yINxVNwSoKM8PwMk/p2ftnkdY1WjvPQ3q3O1A3DaJU=)
2: xQ3PdmMDye_3ODxtjF3bxTEbrgU.roa (hash: OnYXJU1mRvo0V2FhsSO8D1b8k47DbXdYSrQ7JN4NAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:6c:e6:2f:eb:e3:db:ac:fd:8f:f6:30:1e:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Aug 10 08:01:09 2025 GMT
Not After : Aug 11 08:01:09 2025 GMT
Subject: CN=fb32b5fbecb1ff16063aaa782ae7c17b97a18ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:d2:a6:5e:8e:a3:f9:78:d3:23:f1:83:80:
35:69:22:8a:66:6b:67:f0:40:22:53:bc:24:ec:4f:
57:b0:5b:99:51:e6:b2:65:83:51:73:42:e4:df:c9:
f5:54:d1:73:05:2b:fa:63:7c:aa:d1:76:57:bf:1c:
2c:ec:e3:db:73:e7:fd:05:11:92:f7:1c:0a:cf:02:
d6:27:f0:93:b4:6c:c7:b8:31:18:19:56:ed:05:34:
c8:fe:82:e7:ee:b7:8e:4d:35:3a:be:98:ca:a8:ca:
09:e5:28:cc:0f:e2:50:1c:c6:0c:55:fc:a1:33:0b:
a3:be:d6:37:e6:8d:09:8d:70:4c:7b:96:58:a9:46:
61:80:e9:c0:99:fa:af:01:30:27:c5:55:9b:d7:a5:
16:62:4c:d3:f4:4f:5b:64:0e:72:f1:12:b3:43:e6:
26:bd:10:02:f3:77:a6:b3:89:ec:af:ac:27:a2:7a:
88:b8:ba:3d:60:4c:57:b6:10:96:3e:af:78:93:84:
bd:37:32:c2:be:94:cf:16:4c:c1:7d:37:c6:2e:20:
44:ed:f9:71:b7:40:e9:28:66:4b:84:8f:e1:06:5a:
95:b2:6a:66:02:ca:32:a6:94:f1:2d:ce:70:ea:21:
3c:2a:67:71:d7:10:47:17:84:5f:8e:69:a0:48:3e:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:B5:FB:EC:B1:FF:16:06:3A:AA:78:2A:E7:C1:7B:97:A1:8F:F0
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3b:21:e4:3e:43:72:99:0f:85:79:d0:36:95:8a:a3:e5:cb:
50:e1:66:6d:21:3b:53:75:b3:bf:76:6a:1c:71:c3:50:22:66:
ba:33:33:8d:10:6d:82:56:58:50:0d:41:7a:47:85:cd:fd:dc:
61:94:fe:be:cd:5d:fd:f3:e2:ba:5f:97:5b:81:a3:3a:ff:60:
44:65:0a:30:1c:bf:91:93:8c:bc:8c:82:3f:ad:2f:25:4b:b9:
a9:3a:22:24:87:81:c2:2b:05:e4:1e:d1:80:ea:37:d0:ed:ae:
30:8f:6a:ce:e7:e6:31:b6:d4:91:94:f3:f9:c0:61:ad:26:65:
c1:6b:e2:76:b2:37:87:ab:d3:7b:a4:c6:38:09:95:a5:96:24:
cf:3d:11:9f:5c:ee:28:b0:8d:b6:0d:9d:70:cf:d3:47:24:87:
ea:3d:76:17:54:2c:ff:ba:b3:9e:b7:5d:72:5c:12:5c:73:89:
6a:56:3b:ba:45:72:51:ec:71:cc:20:90:a8:3c:0b:17:ae:e1:
23:af:4a:4b:bc:5f:38:23:eb:d3:22:85:86:cb:49:66:5e:7f:
84:ca:c4:4b:5e:a7:a4:59:2a:8b:93:89:8f:34:a4:3e:3a:dc:
0f:7b:a8:90:33:92:c3:b3:01:95:6c:3f:92:08:75:8d:26:10:
c9:ab:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:27 2025 by rpki-client