Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json)
Hash identifier: Uez4ht64LMOohkId+z1hVbzip0dgxc815iP7UULYCb0=
Subject key identifier: 71:A3:8E:B6:7F:17:85:A6:7E:FB:9D:32:30:EE:FA:1F:76:87:34:15
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 01987C0948ECBEE584C90909A516095C2817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
Manifest number: 15EB
Signing time: Tue 05 Aug 2025 21:00:39 +0000
Manifest this update: Tue 05 Aug 2025 21:00:39 +0000
Manifest next update: Wed 06 Aug 2025 21:00:39 +0000
Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: MCG6lMQUJ9YkvGkaiXch6arCSVTi0n/OiJwdt/WcPEs=)
2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:48:ec:be:e5:84:c9:09:09:a5:16:09:5c:28:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Aug 5 21:00:39 2025 GMT
Not After : Aug 6 21:00:39 2025 GMT
Subject: CN=71a38eb67f1785a67efb9d3230eefa1f76873415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:a2:27:dd:8b:c2:89:04:02:34:48:ab:8c:
eb:6b:b2:e3:f1:b3:a7:6f:d6:b6:c8:40:8c:54:c9:
1a:7b:57:05:39:1b:31:20:8d:c5:8d:c2:25:05:b5:
63:22:25:be:1b:d1:e5:52:1b:18:9b:07:b7:11:bf:
4a:8c:e7:68:24:f5:f6:dc:30:73:52:c7:26:6f:a0:
0a:dd:c7:31:69:e3:ef:8a:bf:56:e7:d7:e3:8d:15:
61:d6:68:d4:ad:87:4e:c6:8d:ce:e5:c1:82:0f:f2:
c6:4d:46:b5:7f:2a:e5:33:0a:23:d8:4d:a1:91:3b:
ba:23:68:c9:65:b9:c2:f0:3a:d8:cf:46:9d:a8:a6:
59:2a:d6:95:d6:32:b9:3f:01:db:ef:e2:83:57:c1:
44:99:83:a9:ac:92:66:ee:f4:ac:93:70:2f:92:f6:
79:f7:97:23:11:9b:46:c9:07:0c:4d:e2:3c:0d:81:
72:9e:c0:cd:b5:5c:06:45:05:5d:cd:ac:63:20:9e:
5b:ca:57:52:2e:ca:14:b0:32:cd:b7:05:a1:c9:80:
96:a5:a3:e7:35:13:06:dc:cf:ef:31:90:97:92:bc:
81:75:84:77:d2:9b:df:9e:d5:ce:19:af:96:ee:fe:
e5:83:59:91:24:9d:0b:e7:77:c7:9c:6b:8f:24:f6:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:8E:B6:7F:17:85:A6:7E:FB:9D:32:30:EE:FA:1F:76:87:34:15
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:a5:f7:a2:08:bf:58:3f:e2:49:d4:87:17:0e:a8:12:74:
20:ff:6f:20:5a:84:c6:2c:1d:8b:36:22:31:d7:2c:11:c2:0a:
a1:bf:65:e4:a8:c0:73:00:5a:c3:c4:ff:93:fd:c8:53:34:c8:
5d:db:ce:32:64:84:1c:0c:83:b3:6e:d7:b8:fc:3c:d3:3e:05:
05:54:80:57:f1:f5:12:26:21:67:4f:20:2c:8c:13:47:22:a6:
ed:75:5c:6c:9f:bd:f9:a0:fe:38:db:5e:b9:5e:86:52:94:fa:
08:1c:71:1f:64:6f:d2:58:8e:37:f0:ca:d9:97:59:7c:4e:43:
f4:9c:82:cf:51:ea:29:f2:94:db:28:2a:d3:61:0c:c6:d9:f6:
e6:8b:59:46:97:19:49:20:97:fe:bf:79:8c:ad:29:a4:7e:4a:
ad:4f:82:f1:06:b4:61:5d:3e:2d:f4:58:91:1c:77:bb:33:b2:
b4:90:cf:94:9a:e9:d5:58:db:05:15:cb:5a:41:16:07:b3:78:
87:a0:db:6a:81:86:f5:d4:74:2c:ed:e4:da:ce:bd:7f:53:24:
14:8f:7d:61:93:99:0a:23:7c:83:53:87:ca:57:32:25:27:76:
87:32:a3:0f:0d:84:ce:3b:59:f3:b4:98:27:37:fb:52:cb:44:
5b:87:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:43 2025 by rpki-client