Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: PivA610f00Ggch5Kv7qJggUjMXIhjGaiuDOASCADaZg=
Subject key identifier: F5:8E:BD:C0:F6:7E:77:FD:F9:3B:09:24:4C:3A:95:34:FF:A6:08:E4
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 01987CE56B8BE8C8DE826E4BF5D33F2B6C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0AC5
Signing time: Wed 06 Aug 2025 01:01:06 +0000
Manifest this update: Wed 06 Aug 2025 01:01:06 +0000
Manifest next update: Thu 07 Aug 2025 01:01:06 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: u4NOg29lGJkGO6Bk8soILB7wqyfILvJh0YMfdhnAMEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:6b:8b:e8:c8:de:82:6e:4b:f5:d3:3f:2b:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Aug 6 01:01:06 2025 GMT
Not After : Aug 7 01:01:06 2025 GMT
Subject: CN=f58ebdc0f67e77fdf93b09244c3a9534ffa608e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:62:4c:31:3f:4b:ea:89:c4:53:8e:a5:06:
67:16:bb:27:74:53:71:31:87:49:25:6a:db:43:8f:
e7:6d:00:98:f6:78:3d:f7:1e:e4:10:43:6a:9b:ab:
88:29:78:75:71:ec:1f:11:f9:1c:dd:f5:28:36:5c:
a6:51:a1:c3:cd:5d:fa:f1:99:e4:3a:54:f0:e7:e5:
fd:20:51:c5:ac:7d:9a:fe:9e:0b:b6:8a:81:ce:60:
ae:81:c6:60:b3:42:8c:3c:da:cb:d3:d8:fb:62:55:
5b:a7:35:68:2d:d2:9e:4f:b9:22:22:7e:c0:60:a2:
91:ff:c0:4d:62:44:a8:af:50:21:8b:6c:14:df:25:
21:ed:cc:cd:3c:d3:a7:39:3f:97:bf:38:05:7c:0c:
11:06:c1:e1:f2:af:5e:60:68:75:34:e8:34:16:a7:
54:ac:5d:31:cb:e5:b7:e0:66:40:61:f1:bb:63:3c:
c2:5b:11:d0:43:a8:77:a7:e6:c6:24:be:2c:8e:9a:
64:d3:2b:9c:64:8a:0d:20:dc:6a:e7:87:f8:72:df:
11:53:1b:84:bf:92:2c:18:70:15:49:93:1b:4a:3c:
36:79:4f:ba:81:ad:8d:ab:09:6c:3d:2a:a5:9f:8f:
86:56:8f:42:7c:da:15:a9:da:75:79:d8:09:bd:65:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:BD:C0:F6:7E:77:FD:F9:3B:09:24:4C:3A:95:34:FF:A6:08:E4
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:32:52:e6:47:4d:e5:fa:f3:c0:c1:fa:ec:ad:85:f2:22:a2:
16:7a:fe:63:c9:19:ad:78:00:bd:af:fe:96:0c:c3:26:f8:10:
a1:fd:ea:6f:14:9c:89:b9:0b:53:b1:5f:88:be:99:37:13:42:
ee:22:3d:8d:37:ed:b6:2d:f4:c0:af:28:58:e1:cd:7a:b8:61:
b6:04:0f:90:b5:36:d0:10:77:6d:8f:b4:c5:9e:4d:35:4a:71:
aa:26:de:fe:2d:2c:6c:32:6c:ed:f7:db:d9:9b:99:a4:da:a1:
48:eb:36:a8:9c:16:c2:b8:d5:a0:46:1e:27:9a:9f:61:67:be:
31:e0:80:33:14:84:1a:10:20:03:ee:bd:45:ce:db:36:cc:1f:
6b:f9:0a:c6:22:15:48:90:a3:1d:e8:21:9d:75:31:42:8a:a0:
ad:f0:1d:e4:17:fd:ec:43:b1:28:02:61:91:5c:a4:b0:58:21:
cf:3b:99:2b:2b:4b:d6:d8:f0:f6:ee:d7:2e:b8:11:46:ef:ac:
26:63:75:f1:ef:bf:73:3f:bb:cf:55:1c:5a:33:70:ec:99:0e:
18:3d:24:1b:ce:2d:d0:e5:2e:23:5e:12:19:d5:54:68:78:10:
26:e3:b1:b0:73:5e:9a:e6:e6:8d:9d:12:a7:83:d0:d3:44:ac:
93:91:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:48 2025 by rpki-client