Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: Pt7bYoLOFCEzBZ5RjWUPg0dUYix5ckk+LL+L1IzIbl4=
Subject key identifier: 65:1F:A9:9B:AD:AE:F6:54:CB:F2:8E:43:73:EF:37:ED:42:C2:40:CA
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 01988A32F8639F0E69795B910F6DAFC6A743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 15:00:52 +0000
Manifest this update: Fri 08 Aug 2025 15:00:52 +0000
Manifest next update: Sat 09 Aug 2025 15:00:52 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: R4URzJ3MKtBaXUbd6UlXw5y4dQi1ZsngoPsmkOhOsO8=)
2: JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (hash: I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=)
3: uttZJDL3LQ7QDxUT6eilC7zrvqs.roa (hash: w5gBSlKjA5Lu1HULnBbNVdum/zMpOaAXAiNTMSLvzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:f8:63:9f:0e:69:79:5b:91:0f:6d:af:c6:a7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Aug 8 15:00:52 2025 GMT
Not After : Aug 9 15:00:52 2025 GMT
Subject: CN=651fa99badaef654cbf28e4373ef37ed42c240ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:3d:57:fe:66:48:9e:d3:fa:02:cf:9d:31:
b2:de:7b:4f:aa:3b:44:30:a7:2e:c5:2f:99:28:ee:
73:97:d1:ba:8c:d7:83:d7:d3:e1:16:c2:bf:d7:c3:
8c:7b:ca:11:7b:9a:36:c9:dd:ed:a6:6b:a5:f3:c9:
10:c4:5e:06:7e:f6:4c:ba:43:b0:17:c7:3f:9b:b2:
f8:0f:58:0f:6d:45:9f:67:2b:41:27:40:5e:91:7b:
f3:ed:ca:f3:6e:80:0f:4a:d8:ba:d2:96:32:e4:8b:
43:76:cd:99:51:51:5c:06:d9:97:87:a7:1d:c5:01:
67:de:f3:c7:78:53:27:90:3b:82:81:56:f3:f7:fd:
a5:ef:43:fc:f9:16:5c:c0:43:4f:05:72:53:6d:ff:
79:bf:29:44:8e:e2:65:f9:ed:91:62:8c:6c:73:67:
9b:8e:7b:39:a0:49:06:f4:07:0a:6f:22:4e:0b:2e:
15:01:61:34:b6:5b:c9:f1:16:e9:a3:ad:21:f6:8b:
be:41:9a:f8:7b:c3:4c:c0:d9:f1:d5:d4:75:0b:58:
5b:55:6e:9d:0d:e2:5c:34:a6:12:6f:70:f1:e0:87:
fd:ef:64:2d:0a:d2:6d:b0:26:be:e7:e5:3f:0e:bc:
f3:88:43:c9:1d:ac:5b:c9:aa:05:d2:91:00:8a:c6:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:A9:9B:AD:AE:F6:54:CB:F2:8E:43:73:EF:37:ED:42:C2:40:CA
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:11:4a:10:5c:94:0d:d7:56:f3:ce:9b:73:f3:5a:05:b8:6d:
de:47:e7:e9:3a:6c:1c:0d:95:43:c9:c4:6a:21:9d:6f:a4:86:
22:6d:f6:b1:c1:28:a9:4d:ba:6d:0e:d7:5e:9f:a9:4b:32:0a:
c8:bc:17:e5:ec:14:a8:d1:ed:ce:1f:cc:31:77:05:40:f9:34:
f7:f2:08:5d:be:3e:00:55:12:cb:da:5d:bd:bb:2e:ef:23:e0:
d9:c9:27:18:01:ab:23:d0:3c:82:12:ac:a3:79:a8:03:60:30:
22:e4:ea:fd:d8:54:aa:15:b6:36:1f:e6:90:3f:49:61:2c:b9:
56:ac:98:e0:27:05:11:41:d3:e8:76:2d:eb:a3:4e:87:30:9f:
58:be:0e:4a:17:65:7a:5c:8e:5c:89:f8:2f:11:fe:88:39:51:
1d:48:a1:0b:2b:0f:8a:d3:79:fc:7c:19:b1:d3:71:fe:1e:e0:
c7:63:af:20:e7:d8:f8:9c:1f:cd:7c:bc:7c:1d:6c:de:e0:93:
02:ab:d8:82:6f:d8:7e:a6:ee:c7:0d:16:d4:df:03:f4:a8:ff:
e3:cb:c3:9e:0d:fd:ed:55:50:48:0a:a5:fa:b0:9d:0b:e0:24:
0e:e2:85:6c:d6:56:db:a3:3f:c4:04:db:17:87:b8:24:11:0a:
83:c5:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:51 2025 by rpki-client