Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: c/2kZk7+mBDwDTeYChtAINAKPiTUm/fVYElqY+etq4s=
Subject key identifier: E3:A1:B4:CD:FB:47:86:74:1B:47:1C:80:13:F4:9D:3D:FC:5F:4A:18
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 0198A196B49A42F2EDDC3000B15139C089F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 162D
Signing time: Wed 13 Aug 2025 04:01:05 +0000
Manifest this update: Wed 13 Aug 2025 04:01:05 +0000
Manifest next update: Thu 14 Aug 2025 04:01:05 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: HVtY3nfO1/08SqNG0rJGP8w7Qo0YIeKuCfiCpWhnWm0=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:b4:9a:42:f2:ed:dc:30:00:b1:51:39:c0:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Aug 13 04:01:05 2025 GMT
Not After : Aug 14 04:01:05 2025 GMT
Subject: CN=e3a1b4cdfb4786741b471c8013f49d3dfc5f4a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:44:b9:dc:b2:b7:77:01:97:9f:f8:27:bc:
ad:ab:3b:fc:19:bd:df:83:6c:4e:e4:e0:0f:83:4f:
09:12:ac:04:b1:d3:52:83:94:7e:d2:e2:19:6f:24:
40:eb:f6:f4:6b:ad:34:77:ac:35:39:47:1d:27:dc:
88:18:7f:80:20:4c:3e:20:19:5e:7c:77:b5:33:54:
2b:0d:be:39:97:07:74:00:c0:92:ff:80:4a:81:c9:
60:cf:51:df:41:00:39:61:be:0a:8d:bd:e2:fe:4b:
92:57:b7:1e:f4:3f:93:0e:77:81:fd:d0:dc:05:04:
d7:ba:48:ea:1e:0d:bf:73:b3:8f:9e:a2:63:72:f5:
d0:34:8d:65:05:de:68:46:8b:e1:e0:15:06:aa:61:
e9:32:95:ee:81:e3:6f:e8:38:7d:6a:b8:fc:d7:b0:
28:aa:d5:d1:b5:e2:19:ac:81:7d:d0:b5:9b:e8:5c:
f6:44:10:1f:94:93:72:75:f2:ea:ec:5e:ef:7f:4c:
a7:04:6d:76:91:f5:f6:4a:81:3a:69:6d:69:b8:7c:
b0:b9:7c:74:a9:09:02:d5:36:09:b6:95:f3:07:41:
61:5f:53:2d:af:fa:3d:72:3d:07:73:a5:d0:a9:b8:
46:8b:80:d6:46:ea:4e:ab:2a:c1:34:25:67:ec:a4:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:B4:CD:FB:47:86:74:1B:47:1C:80:13:F4:9D:3D:FC:5F:4A:18
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:70:20:91:b4:65:fb:bf:33:df:d4:e2:c1:3a:80:1e:de:
ea:c8:35:84:f6:c8:7f:ae:2d:61:91:5b:14:61:0e:13:b4:bc:
5c:71:2d:a1:d8:26:d7:ad:23:01:2b:14:61:1e:24:04:ad:e5:
22:5a:65:56:31:70:b5:ce:19:b7:86:c2:4a:49:01:39:25:4a:
bf:ff:2e:ac:c9:4c:c9:79:09:37:a9:7f:bc:08:a6:3c:ea:5d:
ca:f1:76:d2:37:90:7a:a4:13:7f:ac:62:67:f2:18:3f:64:94:
74:5f:6f:52:b5:55:03:b7:7b:03:e8:c2:7b:1d:30:03:de:5b:
51:00:09:bf:b8:2e:63:5e:8e:eb:60:cd:39:4e:0b:e2:97:64:
bf:d5:5a:60:70:f7:09:4c:9d:51:dd:78:74:3f:06:13:10:72:
08:a5:5e:3b:76:a5:96:47:aa:22:9e:fb:0b:86:f4:85:ca:4b:
36:76:d6:f2:b2:bd:d7:48:a7:ee:18:a3:7b:f0:98:e5:cf:49:
79:8e:9f:b9:98:c6:51:0b:08:0d:6f:de:01:a1:d5:ac:a0:43:
e9:2f:4f:7d:8a:ba:d4:61:88:ba:9e:f6:42:b8:92:ae:3d:a1:
45:8b:4d:e6:72:1e:7a:96:25:ae:0e:44:cd:f2:a0:7e:00:94:
5c:cb:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:35 2025 by rpki-client