
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: wd2014NDhO+Omdi6Z/GSSXw709wASw9JYP0mHQtN+1Q=
Subject key identifier: 33:60:BC:AC:40:41:FC:14:14:E9:CE:36:06:F6:E6:00:D5:52:87:F1
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 01988B1069F68874FE5A631F5F7F45D557FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 15B1
Signing time: Fri 08 Aug 2025 19:02:45 +0000
Manifest this update: Fri 08 Aug 2025 19:02:45 +0000
Manifest next update: Sat 09 Aug 2025 19:02:45 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: JtBlB6LpfS2bi024Hlut62FXcgwT1GC/bP0+JvSmJfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:69:f6:88:74:fe:5a:63:1f:5f:7f:45:d5:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Aug 8 19:02:45 2025 GMT
Not After : Aug 9 19:02:45 2025 GMT
Subject: CN=3360bcac4041fc1414e9ce3606f6e600d55287f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:9e:5a:6f:3a:d2:3a:17:b5:05:a7:3a:68:
67:b1:cc:d0:42:cd:1b:dd:ec:65:2d:3d:54:49:a3:
0f:20:83:6b:89:22:a1:bb:38:3d:1a:fc:84:5e:d3:
6b:53:9d:0c:a9:2a:86:58:97:60:ab:43:7c:14:b2:
c6:06:55:58:c2:65:1e:f1:51:f3:e8:19:b0:98:11:
34:36:b9:48:2d:c8:8e:a4:96:c0:f7:b2:9a:a1:d0:
e5:ed:0e:36:19:c4:81:97:4b:a7:55:02:28:66:24:
21:a7:3c:56:d5:7b:6f:68:2b:e6:f3:1b:a5:ed:cf:
49:ab:94:a6:24:19:12:ae:78:bd:5d:c6:a2:c6:72:
02:80:27:e7:3b:1a:cf:66:ae:6a:47:23:73:93:0b:
56:ad:ec:eb:75:0b:5e:f3:e9:5c:09:99:64:51:fb:
d1:df:f9:f6:e9:9b:73:e3:fc:07:d9:7c:af:47:e0:
70:0f:e9:b0:97:53:99:c1:1b:53:30:9c:fa:69:63:
55:be:8e:74:36:85:02:41:98:36:a9:aa:fd:14:06:
17:42:38:18:9c:d1:b1:2f:7e:48:19:07:28:4d:9e:
ea:ca:17:f8:2d:d0:46:b3:21:fe:be:82:b5:fd:7b:
64:94:24:b8:d8:8d:d3:c7:b9:7d:c0:df:37:f5:05:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:60:BC:AC:40:41:FC:14:14:E9:CE:36:06:F6:E6:00:D5:52:87:F1
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:9b:78:17:ca:7f:cc:f9:ad:5a:ff:93:85:eb:83:4f:64:
8e:44:85:c7:c9:ed:c1:37:89:68:9a:2b:c0:e4:c8:20:7a:83:
3f:3c:2e:48:8a:f8:79:13:e1:66:ca:a6:0b:74:e6:bf:03:ba:
67:06:92:eb:22:8f:5c:a5:a3:8a:a1:9b:f3:f5:45:ef:d0:d2:
6d:f0:85:e6:53:2a:39:39:bc:49:2c:a6:f3:34:2a:a3:5d:cf:
8c:3a:9f:08:bb:34:c6:75:4e:26:6e:69:e8:bb:d8:89:22:a5:
a2:32:71:78:e0:c6:b5:4e:3d:25:37:08:1f:61:79:f5:0a:cf:
af:18:f6:82:22:7c:3f:b2:28:65:8f:d1:5c:79:a5:ca:f3:9c:
82:74:07:cc:01:90:95:38:be:a1:d0:9e:25:c0:c9:71:89:36:
be:c8:6b:17:67:f3:34:37:40:0f:b9:41:64:d3:82:92:df:2e:
6b:2c:ee:b9:f5:da:b5:68:4f:8d:e9:4a:a0:f9:7c:df:c5:42:
b6:8d:b7:94:08:e2:d0:13:c5:1d:fb:ec:16:7e:13:dd:96:4c:
df:50:43:99:17:28:65:b3:f4:9d:70:1a:51:5f:b5:34:6b:46:
54:39:22:7e:a9:a0:13:47:29:aa:5d:d1:f4:8f:6e:3b:bf:f1:
1d:b0:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:55 2025 by rpki-client