Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: zJ7dWfpKwfUKQEMV4tTBZuZvbkdLzTEyUZXEc9c56qg=
Subject key identifier: 09:43:6B:15:0D:05:A3:09:7D:56:39:DC:C9:5E:1C:0D:4B:1B:20:51
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01987E2F3C3EB11B81603CDF959158C010C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0647
Signing time: Wed 06 Aug 2025 07:01:21 +0000
Manifest this update: Wed 06 Aug 2025 07:01:21 +0000
Manifest next update: Thu 07 Aug 2025 07:01:21 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: nuY6N8blnsCLcgKQebDpNrAGxlyrQMUkOQcl87wubzE=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:3c:3e:b1:1b:81:60:3c:df:95:91:58:c0:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Aug 6 07:01:21 2025 GMT
Not After : Aug 7 07:01:21 2025 GMT
Subject: CN=09436b150d05a3097d5639dcc95e1c0d4b1b2051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:68:d8:a8:69:2b:7d:45:9a:59:db:cb:91:
8f:33:02:3a:5c:e0:88:29:05:36:df:f6:7a:07:e1:
58:d8:9e:f3:c3:17:c6:a4:d0:08:b4:95:c8:53:b5:
81:c2:7f:91:89:cb:e9:c1:91:ae:d8:ad:27:5d:3d:
df:df:ff:68:10:e8:b9:1f:56:7a:ef:1c:17:60:ae:
86:07:fa:83:b3:96:05:cf:54:b0:e7:1f:5e:3a:a3:
c3:e6:23:0b:41:0c:c3:a2:f2:8c:e2:63:cb:e3:19:
01:af:cc:82:d5:5c:84:6e:99:32:6c:bc:a0:e7:df:
b7:22:7f:18:2f:bb:f3:6f:82:18:92:4a:08:28:29:
e9:d3:71:75:91:d2:7e:cf:c2:41:12:b9:64:53:54:
3d:3e:a9:d4:42:df:58:87:8b:b3:db:82:de:9d:b5:
3c:d6:0b:74:ad:d0:5a:11:8c:19:22:f8:92:9f:a1:
04:d0:85:b0:da:a0:5d:1b:ce:4a:83:e2:71:ff:7f:
17:4f:1c:bd:7e:f0:fd:3b:75:0e:89:e4:c3:ec:13:
b9:ed:92:2a:a2:c9:7e:f7:e2:40:d1:5d:df:2b:9d:
8c:c3:18:93:e2:8d:e9:cc:68:d3:73:3a:85:8e:16:
ee:6f:66:b1:6f:2f:c3:14:6c:fd:59:27:cd:4d:a0:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:43:6B:15:0D:05:A3:09:7D:56:39:DC:C9:5E:1C:0D:4B:1B:20:51
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:2d:be:f0:f3:d1:11:41:94:35:bb:61:e4:04:26:76:dc:
27:35:97:3e:23:f2:d3:d2:f0:0f:53:06:5a:8b:d0:fd:0e:38:
d8:41:88:3d:18:7e:68:0e:3d:05:ca:d2:9e:36:12:b9:7b:36:
81:c9:f4:91:cc:d7:1b:32:6c:e1:04:62:04:aa:b0:c8:80:29:
29:e8:26:0b:e6:b3:1d:eb:d8:de:ac:f7:e6:12:2e:5e:6b:7a:
68:c4:8e:0f:64:ec:e7:55:bd:26:42:e1:61:87:04:5f:62:de:
e7:59:4b:52:81:8a:d4:e5:fb:da:4a:3c:6d:ec:b6:0e:71:f8:
c4:ee:77:01:5a:0d:2e:14:83:27:31:a9:cd:95:23:6a:9f:56:
da:e6:03:03:87:48:62:f7:fd:b0:98:a1:fd:03:67:e1:2d:a0:
e9:52:9d:00:01:c8:5c:c1:f4:e8:fe:5e:63:a1:f0:fc:7a:d2:
45:3d:68:bb:26:f8:87:1b:4e:84:11:fe:23:8b:b5:6a:9b:e6:
9d:5a:8f:ba:2f:0f:4d:d6:98:e2:78:b2:4d:24:5c:4d:54:bb:
0f:c1:c3:df:78:f5:8a:fb:f3:98:af:05:20:ed:f3:e7:eb:10:
aa:a0:cb:68:f2:e4:9c:ef:81:98:e1:07:ec:34:ef:44:75:1b:
22:77:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:42 2025 by rpki-client