Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: DtiIJ//Dj6mTD78Rz4p7Qaty3T06PXqsY2rkWYGtFD8=
Subject key identifier: 91:9F:A5:53:D2:E5:53:29:62:FA:DC:97:2B:36:2E:D6:8E:48:A1:EA
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 01988B7C4F272F878C6ECEBDD74DDC639B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 0122
Signing time: Fri 08 Aug 2025 21:00:36 +0000
Manifest this update: Fri 08 Aug 2025 21:00:36 +0000
Manifest next update: Sat 09 Aug 2025 21:00:36 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: cpk52XnIhl62sdML3hgaEBsCJX3bCqgDDakz0AyLv60=)
2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:4f:27:2f:87:8c:6e:ce:bd:d7:4d:dc:63:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Aug 8 21:00:36 2025 GMT
Not After : Aug 9 21:00:36 2025 GMT
Subject: CN=919fa553d2e5532962fadc972b362ed68e48a1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:25:05:64:8a:62:20:f4:dd:5e:ac:18:c8:
51:b5:15:17:d6:d4:56:39:2f:12:07:5e:6b:ca:f1:
5e:1d:54:c8:30:5d:72:67:aa:10:be:83:d2:90:d1:
b7:37:85:c4:01:72:9b:f3:5b:28:49:6f:72:e9:ac:
51:8a:94:f0:4d:ba:03:70:e7:48:e2:da:d5:eb:da:
92:2c:e1:58:2a:69:e6:b3:51:08:cb:3f:97:08:35:
42:b8:91:9c:e1:3f:5d:01:dc:15:07:b6:3d:0c:b6:
6c:aa:db:77:ab:0c:32:98:e0:b9:ab:50:d6:65:4a:
5d:68:9e:1c:21:d6:d2:e1:5d:f6:bc:7b:5c:e1:48:
05:bc:ce:e5:77:85:2a:04:83:5d:bd:43:66:b4:ec:
17:8d:7d:b5:54:c9:75:ae:3b:f2:e5:5e:53:73:5b:
12:40:f2:27:48:67:88:49:ac:47:9d:02:c1:6c:ef:
ca:ea:a4:77:0f:ac:f1:30:cc:bc:aa:e8:89:a3:d6:
87:ca:f0:01:79:c3:65:42:ac:3b:c3:b8:44:b0:95:
b1:7d:94:7b:a7:46:00:28:bf:e3:3f:6d:89:b0:7b:
b7:07:36:21:74:06:da:d3:f3:86:dd:5c:a2:7a:36:
12:34:c2:87:f0:74:ec:99:2b:72:32:d3:5a:0d:9a:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:A5:53:D2:E5:53:29:62:FA:DC:97:2B:36:2E:D6:8E:48:A1:EA
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fc:56:03:56:bd:1f:48:3a:09:dd:2a:0c:73:35:9e:96:51:
de:77:86:ca:8d:ea:ad:ca:73:d3:3c:1b:3a:1d:23:67:7c:28:
0d:04:9d:d1:c0:9e:9b:05:b6:d2:ef:b9:51:da:e4:ad:2f:4e:
6b:12:21:38:75:6d:bb:e1:83:3e:b6:3b:54:40:8d:33:70:c6:
8a:e4:bb:e0:c2:44:8e:5e:dd:c3:52:53:c6:7e:26:f7:e4:ec:
5d:61:d8:ae:76:98:2f:87:08:d8:f5:ee:94:14:a6:b0:20:39:
a8:50:79:a0:d4:b3:3d:b0:92:32:41:5d:c4:64:00:dc:07:0f:
26:4a:ca:0d:38:99:a0:1c:99:f0:20:0f:d6:48:a6:52:87:49:
a7:c3:8d:a3:37:ef:40:36:cb:d6:74:73:03:9f:31:d2:20:be:
3f:49:17:83:bb:96:84:7e:37:0f:4d:7d:b8:e4:00:27:89:df:
0d:2c:6f:bf:cf:db:3f:47:ab:dc:e7:f6:0b:ef:40:af:63:b8:
85:64:de:e3:f2:69:67:35:fd:16:88:46:3b:f0:c0:69:aa:9b:
e4:17:55:93:55:63:60:28:fb:8c:47:b5:56:89:1d:97:85:26:
fa:ee:43:ae:cf:88:51:11:dd:37:3c:c1:32:2a:83:4f:37:89:
c0:b5:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:42 2025 by rpki-client