Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: LwjVVzkllt2p450PUcmq6gHkj+V/ZpSUT5llM7QR62k=
Subject key identifier: 97:84:73:12:01:06:24:5F:11:71:1A:3B:36:2E:9F:CC:A0:5C:35:CF
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 01987306FDB5F07043EB2C43077462632D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1087
Signing time: Mon 04 Aug 2025 03:01:34 +0000
Manifest this update: Mon 04 Aug 2025 03:01:34 +0000
Manifest next update: Tue 05 Aug 2025 03:01:34 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: Zyi0QcjeRKNLJBF6eemKzuxXFTLCPTLJ+rY33O3/4V8=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:fd:b5:f0:70:43:eb:2c:43:07:74:62:63:2d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Aug 4 03:01:34 2025 GMT
Not After : Aug 5 03:01:34 2025 GMT
Subject: CN=978473120106245f11711a3b362e9fcca05c35cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:71:7b:99:00:4a:b0:ed:93:bd:8a:c8:27:a1:
41:17:ac:76:7b:23:4e:26:c0:a5:6d:9d:7a:45:ce:
00:0e:e1:86:be:46:51:fa:8b:aa:57:01:61:bd:b4:
dd:b8:70:93:dc:6e:d0:6a:56:d7:c9:43:d1:2b:e8:
87:e0:f2:8d:c2:f9:50:ce:e7:02:ce:4c:a3:e0:89:
b8:fd:7c:02:cd:21:28:fe:96:94:16:f5:6b:48:e0:
a1:6d:c2:33:91:23:81:40:db:5e:16:6e:10:26:86:
43:7d:77:35:62:6a:34:3e:cf:87:22:cd:72:73:a5:
22:5c:f0:4e:c5:aa:29:c5:f3:2d:27:4b:e6:e9:fe:
58:12:00:38:e1:fb:b3:ae:a5:94:67:91:45:7b:20:
02:82:6d:f2:2b:cc:32:00:19:1b:7c:99:d5:35:12:
95:a3:8d:6a:4b:0f:28:7a:14:47:62:7f:28:02:8f:
66:1e:76:db:4d:cd:fc:27:74:82:96:54:37:46:cb:
01:82:78:22:cf:33:76:c3:d6:b4:54:27:a8:61:2b:
12:ab:b3:63:6d:59:2f:8c:89:44:fc:6d:1c:26:9c:
a3:11:6c:22:da:2e:70:a4:41:47:99:fb:25:99:1f:
17:05:5e:8e:89:2a:9d:6e:4c:f5:8d:36:d5:93:ba:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:73:12:01:06:24:5F:11:71:1A:3B:36:2E:9F:CC:A0:5C:35:CF
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:80:f9:e9:d9:37:93:f6:61:1f:78:c5:e1:93:52:a7:21:22:
f1:ad:1e:ef:43:59:8e:e0:57:4c:0e:0d:90:bf:5a:5c:e7:c1:
4e:e4:6f:23:58:34:fd:09:6d:f5:29:ab:4d:d5:fa:2d:f0:5c:
9d:7a:9b:a0:4f:b4:eb:87:60:b4:ca:43:61:75:c3:7c:56:75:
9c:e5:ec:76:42:5a:1c:2e:a8:d5:30:83:f7:a4:e9:b5:fc:c1:
b9:28:a2:34:fd:c9:40:22:3f:32:8e:80:32:4b:0e:e0:58:a0:
b1:4c:49:4b:7e:7c:8c:cf:2b:0d:a2:5f:3c:56:3c:e1:79:90:
eb:63:55:b4:00:74:0a:2d:8a:32:39:ee:ae:4f:a3:e6:86:a1:
f9:20:e2:8a:13:fa:ff:a5:3d:1e:63:ae:26:10:1e:8c:3d:27:
20:e8:f3:99:83:34:c9:f0:bf:86:c5:1c:cb:a5:ef:8c:be:4c:
7f:63:7c:c9:b9:9d:65:84:73:d3:08:89:3c:7d:8c:c5:63:af:
ce:11:82:7a:49:9e:d7:60:9a:3b:8e:15:c2:71:4d:59:f4:04:
56:e7:d0:58:f7:d7:b4:1a:e3:2b:24:cd:e4:00:ec:1e:9b:81:
26:91:93:05:fc:c1:7c:93:92:93:73:0c:6a:c6:b9:a2:80:9f:
d2:33:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:19 2025 by rpki-client