Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: SIL3i3L7WDDMtKuycJOMOEMbMS0Rm9vSv2IXWqrMQhc=
Subject key identifier: EA:FE:91:86:3D:2F:D6:25:63:05:0A:6A:E2:62:05:42:A0:45:06:68
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019892C7D5FE76F4E22C5E29B71EC2B65073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 02F5
Signing time: Sun 10 Aug 2025 07:00:26 +0000
Manifest this update: Sun 10 Aug 2025 07:00:26 +0000
Manifest next update: Mon 11 Aug 2025 07:00:26 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 1adWFu+5mcwiTC7vHo9xDOxzcWpyrUWh6tvm+yUCbeE=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:d5:fe:76:f4:e2:2c:5e:29:b7:1e:c2:b6:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Aug 10 07:00:26 2025 GMT
Not After : Aug 11 07:00:26 2025 GMT
Subject: CN=eafe91863d2fd62563050a6ae2620542a0450668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:cf:50:92:ca:c6:f4:48:e2:e7:1f:73:3a:
70:2d:80:c9:c1:57:86:31:74:f9:13:d8:a3:8a:55:
83:96:67:51:04:13:3d:84:5b:52:1c:8d:7a:43:5b:
af:0c:10:92:32:6d:f5:9c:56:62:a6:65:b7:e9:eb:
9b:24:9b:80:bc:30:7d:56:95:89:5c:97:47:ea:2e:
a6:b6:cf:9d:d9:19:f4:c4:ff:da:65:1e:61:a1:28:
42:1d:61:2d:a6:a3:2c:4d:88:eb:07:f6:27:e8:31:
21:5c:46:fe:ff:f0:70:b1:62:ef:eb:c8:21:f7:3b:
b5:d2:2b:64:d3:60:8e:08:b5:f3:34:88:cc:0d:57:
37:71:3a:bd:fd:7f:c3:d8:af:33:62:9e:91:f4:79:
d0:66:89:79:b6:da:cd:17:89:bc:c7:70:49:90:81:
db:a6:34:d8:a2:de:e9:0f:d2:f6:a8:87:99:50:98:
58:48:ae:5c:35:58:12:6c:45:c4:e9:0e:3c:c5:5e:
79:7f:35:00:e7:bc:b3:e3:46:bc:2d:60:69:ad:45:
d7:30:dd:42:07:c4:72:6d:31:fa:a5:1f:eb:b9:d7:
30:e7:0c:b1:6b:03:60:39:ce:a2:54:c6:87:d5:b8:
3f:a6:54:ec:36:5a:c2:27:30:2f:91:f9:fa:77:cd:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:91:86:3D:2F:D6:25:63:05:0A:6A:E2:62:05:42:A0:45:06:68
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ee:89:35:bf:b4:a2:02:e7:fa:1f:1b:13:8a:5f:98:cd:d6:
26:5c:d4:ed:bb:dd:36:6c:b5:62:73:7a:37:9c:c4:83:49:5a:
7f:e8:a2:ac:4a:c8:58:05:2f:d7:de:bd:91:28:de:f6:6e:c7:
37:ee:24:d6:4d:31:13:a8:b7:7e:56:a6:ed:81:62:b8:12:e9:
d8:05:fa:91:1a:25:32:6b:a5:8b:73:b3:07:11:22:53:1d:c0:
27:1c:68:17:de:18:16:e3:1d:9a:f0:12:fd:f2:05:10:ff:c3:
b2:22:4a:46:1a:b5:3f:2b:b4:4e:55:9b:8c:3c:83:ef:4d:87:
ec:0f:01:1f:4f:04:d5:fc:fe:ff:c1:11:1d:9f:cc:44:f0:df:
1d:34:98:bf:f6:1d:ae:8a:1c:f4:15:bf:c5:a0:9d:3c:a8:eb:
2e:f4:25:a5:bd:5f:b7:d4:63:55:33:30:78:ea:23:21:a0:54:
84:ae:be:a1:38:3e:0b:6e:be:75:77:5b:e3:e9:c6:7a:db:37:
e8:de:ed:e1:bf:8a:dd:b3:32:67:a9:c0:c3:df:d5:02:05:d3:
15:e8:b9:4e:54:8b:a5:1a:1b:90:8f:47:a8:9b:e6:86:ee:65:
55:4a:9f:68:62:df:ad:53:a5:8f:e3:96:02:9d:de:a7:6b:ed:
3d:a6:30:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:31 2025 by rpki-client