Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: Ayo7d1oAf3OtFkSJZ21wCxRIYPMDAGDctGSiyQjIsc8=
Subject key identifier: 2A:6C:D3:32:B9:02:FB:BC:51:1A:BC:B1:24:24:37:FB:46:7F:B5:15
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 01988168C650832550409133BB29274F4EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 115E
Signing time: Wed 06 Aug 2025 22:03:03 +0000
Manifest this update: Wed 06 Aug 2025 22:03:03 +0000
Manifest next update: Thu 07 Aug 2025 22:03:03 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: UIgYDG8yI5ivW9IIOUxNHKPaVNhuUmuUn2t52udPEtE=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:c6:50:83:25:50:40:91:33:bb:29:27:4f:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Aug 6 22:03:03 2025 GMT
Not After : Aug 7 22:03:03 2025 GMT
Subject: CN=2a6cd332b902fbbc511abcb1242437fb467fb515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:b1:19:81:4d:07:79:99:59:d2:84:ef:ba:
dc:fc:63:a6:8e:7f:0a:b5:89:17:4c:9b:25:93:50:
9e:b1:6e:87:f4:e7:eb:4e:02:25:f4:b1:ac:97:43:
36:43:58:d7:2c:f7:3c:36:3b:ed:fa:7a:5c:78:81:
31:c0:74:3e:a6:ad:bf:f7:5a:9d:bc:14:63:8b:f1:
1a:13:b8:a3:83:12:20:ef:63:86:5d:a1:0d:8f:2a:
dc:f9:5c:0b:67:b2:0a:8b:22:b7:b2:86:1c:ba:0f:
8b:74:83:5e:a3:7d:b3:67:3f:7b:01:48:53:89:d3:
85:d6:03:5a:12:20:67:bf:99:ff:bf:d3:b9:17:8d:
cd:e2:86:31:6f:44:f2:cd:af:f2:89:3d:b0:37:e7:
4c:b3:07:56:4c:4a:2b:8d:22:2f:24:f6:01:4b:ab:
2d:9d:ee:58:4f:22:24:17:a7:f9:b8:ab:29:78:a6:
a2:18:48:55:24:e8:46:d4:7c:d9:14:75:db:6c:cb:
1a:5c:46:d9:25:15:a8:cb:2b:b2:d0:f9:10:f1:41:
07:6f:3c:ea:cd:dd:b9:16:95:54:75:cf:2b:23:7b:
73:93:33:bd:08:0a:47:14:b1:22:2f:9d:08:24:1a:
b7:73:ec:a1:b3:90:ae:9f:af:bd:0c:51:88:42:f7:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:D3:32:B9:02:FB:BC:51:1A:BC:B1:24:24:37:FB:46:7F:B5:15
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:97:14:04:87:b9:ea:ae:a5:e0:e7:56:16:af:b3:fc:01:
6d:9c:ea:93:cb:8d:d3:28:96:2d:bd:9b:bf:9a:1b:20:63:1c:
b0:02:11:8e:e2:c5:a0:82:8e:10:50:a7:9a:50:e5:13:1d:74:
b1:c2:11:84:01:74:cc:58:3b:68:93:5c:a0:ca:92:6f:40:0e:
11:fa:6a:cd:ca:64:53:bb:c3:07:9b:6f:83:f9:95:d6:c1:1d:
d7:db:eb:48:3e:ec:06:68:ed:96:29:19:52:d5:6d:e9:6e:79:
5b:3b:b8:1f:7f:d1:30:c4:a2:4e:b0:6e:2e:95:ba:6e:bb:ef:
d9:55:68:88:0a:dd:bc:a0:46:ea:67:12:44:ea:5b:5b:83:ce:
27:a2:c5:40:40:86:26:da:92:2a:36:97:37:ea:c0:ea:98:90:
da:cc:13:86:63:ee:b9:cf:85:17:2a:b5:2b:96:a1:6a:39:e7:
2c:b3:95:48:dc:21:54:40:6c:7c:f3:1c:d8:b4:81:99:98:8e:
89:6c:2c:e6:92:c4:3b:eb:fc:a1:a3:4d:d8:a8:44:97:60:1d:
30:2a:fa:e8:99:6f:b1:86:6a:de:d9:22:e4:05:90:de:57:e4:
0c:d8:4d:67:fa:f4:6b:0f:70:de:97:65:ec:e7:41:d4:6b:3d:
b7:5b:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:31 2025 by rpki-client