Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: +3Cz1f0c336A+zV5rezNGR0jw/4632ol9PNpzMxVgq0=
Subject key identifier: DD:71:A7:BB:BE:3E:4E:72:AA:7E:2A:35:C7:FF:53:AA:65:A9:09:E3
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 019879E3EB2A6A63DEC12BAFFB81B6FA45D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 11:00:36 +0000
Manifest this update: Tue 05 Aug 2025 11:00:36 +0000
Manifest next update: Wed 06 Aug 2025 11:00:36 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: YpC5WjVvGwMKe3u46nFi6Zty8HntuXPf9oGp0enhZ/o=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e3:eb:2a:6a:63:de:c1:2b:af:fb:81:b6:fa:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Aug 5 11:00:36 2025 GMT
Not After : Aug 6 11:00:36 2025 GMT
Subject: CN=dd71a7bbbe3e4e72aa7e2a35c7ff53aa65a909e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:20:61:59:3a:35:01:79:0b:f9:a3:3d:3f:
c3:e7:97:84:78:52:62:cb:7f:1b:5a:f0:c4:89:cd:
0f:9c:76:61:34:64:a8:05:b7:de:97:33:ea:f2:fc:
5b:c6:68:81:4c:23:a1:a7:2d:dd:6f:c6:8c:b1:35:
c3:8f:a4:04:86:a1:65:b9:b7:f5:1c:bf:4b:7a:15:
e3:b8:3a:de:7f:5a:21:25:9b:f6:e0:40:b2:d0:80:
06:f8:eb:d9:1a:09:f4:0d:54:aa:86:dc:c3:5c:c1:
ae:13:4a:29:3b:8a:ff:e4:63:ef:48:a9:20:22:26:
ea:ef:28:45:7b:48:c1:89:3e:d1:4a:dc:30:a0:d3:
7d:ea:7a:9e:20:0f:15:7c:91:07:38:5a:a6:bc:b4:
c1:86:b3:51:23:54:05:6b:05:f9:36:93:cd:35:8c:
52:b0:1a:a8:53:f2:87:fc:f6:ce:c9:a2:aa:a9:ad:
1d:a4:ff:32:d1:d8:7e:7e:d9:a8:0c:fd:53:cd:1c:
11:9f:1c:85:e9:e7:78:90:18:9e:08:67:b4:05:8b:
3f:1c:e5:c5:e6:86:64:8a:60:9a:e9:f9:cf:81:ff:
30:89:c8:bc:3a:ec:cd:ba:95:13:de:c6:45:2f:0d:
19:9c:55:e1:ef:45:93:c7:bc:0e:8b:ca:0c:dc:bd:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:A7:BB:BE:3E:4E:72:AA:7E:2A:35:C7:FF:53:AA:65:A9:09:E3
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:bf:27:0b:e2:76:fb:71:9c:c4:3f:67:5e:13:61:01:52:
98:88:91:ec:6f:a9:5b:de:03:3e:3e:54:78:68:72:e3:1b:21:
b2:41:bf:1b:a1:42:6d:13:29:0e:dc:76:a1:9d:ec:a2:11:b6:
8d:15:bd:1e:5b:04:62:6d:7d:72:89:30:7c:94:1a:f5:53:4a:
ef:38:0f:81:ec:98:b3:5e:2d:8c:86:34:c1:53:91:05:2c:57:
62:65:25:22:40:73:20:1d:57:d1:33:a9:8a:9d:99:e1:04:87:
fb:4a:29:39:20:14:d6:44:57:06:ac:07:68:bf:32:f0:d7:dd:
3e:6f:cb:5a:3e:e5:b3:71:d5:f4:6d:69:3a:72:a1:05:a6:e7:
59:bc:a3:e9:82:10:99:24:36:e4:4a:dc:87:05:d6:38:cf:13:
4d:6e:b0:d0:04:dd:f5:6a:b5:a6:d6:9a:3c:ee:d8:a1:ae:e1:
5a:a6:c0:52:e7:34:b4:99:f1:a7:c4:05:ce:4b:1d:ee:7e:76:
24:12:7c:a5:73:30:ee:5c:e2:56:9e:8b:62:3e:70:fb:3a:2f:
3c:5b:78:ee:f3:c0:41:97:51:b7:58:a5:52:ba:06:77:3b:fd:
f1:86:d5:66:3b:f6:db:c1:de:6d:e6:f6:86:0a:c6:2a:f3:e2:
3d:6e:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:54 2025 by rpki-client