Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: FLghx9EUWPYSNDdblaqc8PXOLgbhQk752JgFUTEg6G4=
Subject key identifier: 94:E4:10:85:BE:6D:D9:0C:CC:6E:73:9E:E2:BF:61:91:8E:53:A1:95
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 01987DF86EBD53C06F8EB31C6CC81438391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 062F
Signing time: Wed 06 Aug 2025 06:01:29 +0000
Manifest this update: Wed 06 Aug 2025 06:01:29 +0000
Manifest next update: Thu 07 Aug 2025 06:01:29 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: wfgwoiSGJcXxNnKYcNPwLlqgeojnJAnK4MmRoxFvzNE=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:6e:bd:53:c0:6f:8e:b3:1c:6c:c8:14:38:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Aug 6 06:01:29 2025 GMT
Not After : Aug 7 06:01:29 2025 GMT
Subject: CN=94e41085be6dd90ccc6e739ee2bf61918e53a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:b7:98:a1:7d:6b:7c:ca:80:79:9e:34:60:
bb:58:46:6b:13:f6:b1:1c:f7:6d:1d:96:ee:31:23:
ce:a5:56:de:ad:b5:e1:e6:f8:19:56:81:86:2d:b0:
08:c7:ec:90:ae:5e:63:8d:44:b1:49:88:f4:1a:d4:
d5:24:42:25:47:59:11:ed:05:81:91:79:ee:a5:34:
63:39:6e:84:c4:ec:cb:58:36:c3:fc:d8:b2:c3:16:
1b:3a:53:7d:42:50:50:db:81:45:04:53:08:2c:5a:
38:df:be:f2:79:dc:c3:e1:79:75:57:fe:9a:38:b7:
e4:cb:51:d6:5a:78:3e:f0:93:9e:8d:3d:cc:88:b4:
c8:1f:9e:27:ab:fb:8c:dd:b7:f2:7c:83:e5:19:42:
c3:fc:7f:0a:f0:f2:1a:c5:75:9a:65:a7:98:12:b0:
ab:d3:62:46:e9:75:68:4e:bb:c3:88:1e:8c:10:da:
ea:6d:4a:9a:10:ac:e0:1e:a8:ce:39:48:14:5a:1d:
95:28:06:aa:65:42:ca:d1:6f:14:08:d6:8a:3b:34:
a5:2f:45:8d:dc:15:04:0b:5d:46:c0:aa:ed:c3:b8:
51:ad:f5:27:15:19:53:6b:8b:47:6a:b8:85:b6:9b:
a9:07:49:69:c3:aa:0c:43:ae:55:c0:a6:41:74:62:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:10:85:BE:6D:D9:0C:CC:6E:73:9E:E2:BF:61:91:8E:53:A1:95
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:19:da:dc:a6:56:2d:b6:47:b2:f0:0e:11:04:ac:99:7e:
f9:5e:53:44:e4:02:fd:35:d5:75:32:7e:a9:b1:f0:b0:2e:5f:
d9:73:61:47:ef:2f:21:26:aa:f4:a4:52:4c:ca:ea:3f:69:dd:
3b:2a:63:82:a3:7c:b1:18:e8:6e:00:ab:0a:50:7c:87:9b:c0:
b0:e5:02:a6:d0:66:2c:58:6a:22:53:76:ef:c5:4d:e6:36:ad:
96:c0:03:d6:30:45:ae:29:f9:02:01:0b:88:a1:0b:35:eb:61:
29:ce:e0:9a:02:2d:47:2b:4f:62:26:4c:98:59:d2:12:34:f7:
fb:94:1c:72:89:28:88:e6:15:42:a8:ca:90:b8:c3:79:d5:fb:
79:67:49:62:67:8e:08:d1:43:9b:d6:da:24:82:bf:ab:80:c2:
ed:e6:08:44:b3:f5:2d:12:42:7c:64:8a:16:34:6f:4e:f4:2d:
2d:21:7c:b9:8e:42:d4:6b:f6:82:8a:15:da:80:c1:75:6f:da:
ec:d7:0a:36:95:69:04:84:0a:61:04:21:b0:24:6c:88:c6:7e:
62:b5:8f:13:b0:0b:59:12:50:03:3f:cf:cb:77:3a:4c:5f:95:
30:75:92:a3:e7:02:9d:63:30:fb:d9:00:9d:df:64:01:d0:a0:
4b:b8:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:33 2025 by rpki-client