Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: q54eFhrneV+8rLVhRZOgNym1oVJNyg2VgbZvmu8cC78=
Subject key identifier: F9:CF:48:C3:72:92:34:71:4D:86:AF:EA:BC:C4:E0:EF:31:B6:F8:DB
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 019880544E22D6559FCE00EA18EC257B5172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 1337
Signing time: Wed 06 Aug 2025 17:01:05 +0000
Manifest this update: Wed 06 Aug 2025 17:01:05 +0000
Manifest next update: Thu 07 Aug 2025 17:01:05 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: H3Sgy4wXJWHEGufnmZ2iaH5MzbJDU9I6CB1z0BOD2b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:4e:22:d6:55:9f:ce:00:ea:18:ec:25:7b:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Aug 6 17:01:05 2025 GMT
Not After : Aug 7 17:01:05 2025 GMT
Subject: CN=f9cf48c3729234714d86afeabcc4e0ef31b6f8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:70:b7:75:bc:00:0a:37:74:eb:1f:c4:79:
8c:e1:21:24:b2:0e:d0:23:04:75:4e:dd:d9:6f:c7:
8f:5f:9d:2e:5a:2c:92:17:86:ac:34:29:f0:d7:7d:
b0:81:b3:4b:4f:00:23:1e:ef:af:a9:75:0d:0f:f3:
97:bb:30:1a:4b:4a:f5:c1:25:43:4d:7e:73:f2:75:
bb:6c:9f:01:77:b6:62:c7:d7:0f:c8:48:9a:8c:09:
7d:d4:9b:1c:e5:6d:6d:b1:69:73:08:f0:f5:9f:0b:
90:1d:0d:98:ac:a9:be:8b:d7:e3:0d:f9:e9:ea:48:
4f:18:c0:c9:13:0c:89:3e:67:6e:62:a5:a2:dd:16:
a6:ed:5a:dc:0b:7b:7a:ef:a9:36:38:2c:ec:c2:ac:
28:45:6f:c0:24:45:a9:c3:85:73:f0:20:96:a6:5b:
e4:05:9c:36:a0:71:ea:88:cc:a6:ab:d8:55:70:e6:
93:e5:08:ec:3d:8f:18:f1:44:c1:5f:b5:b0:61:4e:
da:61:a2:6d:9a:6c:5b:94:bf:ea:e3:89:28:d4:ea:
28:63:ac:fb:aa:ae:73:49:60:25:5f:26:b5:46:0f:
48:3f:17:01:4e:69:95:d9:2b:32:2d:d6:4a:76:57:
d8:cd:e0:a5:6d:40:51:3e:6b:30:80:af:2c:72:23:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:48:C3:72:92:34:71:4D:86:AF:EA:BC:C4:E0:EF:31:B6:F8:DB
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:3a:62:0c:2b:1b:71:8e:9e:4d:d0:53:09:f4:e2:f9:ae:
e9:07:22:32:f8:36:38:d4:c7:c7:e0:4a:03:5b:cb:ce:7a:c3:
0d:2d:5d:ca:ae:01:8f:18:cd:46:6d:90:b6:b6:67:4d:32:05:
80:b4:46:cb:3e:48:aa:bb:5d:de:0c:6d:73:6b:0d:0e:82:b3:
d2:24:31:f7:a8:7b:04:3e:b6:6c:bf:89:3f:df:18:ad:d6:2f:
23:a6:11:88:1d:15:c4:ed:55:f8:d3:d1:68:80:5d:61:70:5d:
66:04:19:aa:d3:c9:db:12:d6:3d:18:1e:ea:2d:77:4c:71:dc:
e5:0f:8c:ab:cd:6b:91:b3:5d:19:aa:68:34:61:1d:10:fa:de:
32:1d:35:ad:f1:65:8d:36:9c:df:dd:67:1e:79:3a:a5:57:41:
0c:01:db:56:f8:92:c7:ab:6e:1c:6d:b1:1f:b7:3a:3a:6d:ff:
c4:54:1c:bf:53:9b:f5:42:a9:be:d1:a0:3d:69:34:48:07:74:
8a:f3:26:ff:76:d6:48:40:09:89:be:a9:90:9b:a3:cf:79:ee:
94:7c:7c:7e:22:0c:31:bd:42:9b:28:47:f2:09:c9:f9:22:6d:
38:47:d9:1e:43:b6:22:9b:b6:82:58:5f:f7:af:b2:bd:b5:83:
86:26:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:41:36 2025 by rpki-client