Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: CATHnphwx591cP5Snz1ZU7E3frnZ5gtcdCaMghInZZs=
Subject key identifier: C2:1F:02:31:B9:01:8F:20:49:BE:56:B0:D8:CC:29:BC:ED:ED:5E:F1
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 01987A5259930E093CA9054DF69779AEA622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0A07
Signing time: Tue 05 Aug 2025 13:01:13 +0000
Manifest this update: Tue 05 Aug 2025 13:01:13 +0000
Manifest next update: Wed 06 Aug 2025 13:01:13 +0000
Files and hashes: 1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: P9oNbqyjHsrtcNDRlBQfKhY92Zrwh6PHc0HY2kwvkAA=)
2: aTpXXC3KXcSwtDcwh6F3niPkHWU.roa (hash: ustcN0bW+oUtpGBdM/dRdF4t5dwpSRMOI1Anoza5nkA=)
3: mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa (hash: 9qLzR+8C4wkJn5IoUy5FHXOEqts6JcExi312TdCvl90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:59:93:0e:09:3c:a9:05:4d:f6:97:79:ae:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Aug 5 13:01:13 2025 GMT
Not After : Aug 6 13:01:13 2025 GMT
Subject: CN=c21f0231b9018f2049be56b0d8cc29bceded5ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:3f:59:1b:c1:a5:2e:cd:47:3f:eb:78:8a:
43:9f:19:45:fc:87:c6:59:24:1d:15:36:0f:0f:d7:
a2:f5:02:15:f7:f1:60:9e:19:03:3d:fa:cf:96:36:
04:ce:78:5b:17:03:7c:02:bc:32:9f:48:8f:0e:0f:
eb:dc:c6:e9:57:3f:01:27:fd:8e:fa:e1:39:45:e8:
80:c7:97:c7:ba:37:a9:cd:7b:23:a3:77:7a:5a:5a:
c4:1b:a6:c4:9a:af:4c:49:8d:84:0c:c2:62:16:69:
3b:9c:09:41:67:29:17:df:25:64:8d:c7:71:9d:92:
dd:37:48:5e:d4:d9:d0:5d:98:f3:40:44:3a:35:23:
eb:06:df:52:41:21:73:14:b8:fe:6a:95:21:44:46:
3c:61:ee:5b:da:82:45:ef:4f:a8:f8:77:02:f4:5c:
e4:79:1c:c1:c5:6a:66:a4:bd:fa:35:ec:bb:74:24:
99:68:57:04:de:fd:98:58:db:93:f7:63:eb:d3:47:
ed:02:04:b5:03:14:7a:78:c6:5e:bb:3a:13:18:13:
f1:ff:b2:5c:ea:d8:1e:33:8c:cc:2f:14:b6:a1:20:
f6:0d:98:89:eb:08:5f:fd:6a:dc:01:f2:18:67:85:
a8:72:c4:ad:6f:e9:b7:16:7c:74:01:ce:48:0c:42:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:02:31:B9:01:8F:20:49:BE:56:B0:D8:CC:29:BC:ED:ED:5E:F1
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:eb:ee:e3:bc:40:c7:47:77:68:10:cb:2b:ca:bb:74:4d:dc:
54:96:e0:79:78:a9:1d:e6:19:0e:1f:6d:17:fc:64:7e:2c:b3:
02:7a:d2:bc:2b:70:2a:42:66:70:d5:1f:70:83:b0:1e:92:50:
48:89:68:a5:21:04:57:f2:a0:87:25:fa:fd:5a:cf:e2:94:89:
1d:49:04:33:da:29:d3:ed:9c:b0:51:5b:d1:6e:ac:4d:cd:10:
5a:05:89:27:7b:32:7c:04:7d:91:ea:64:c1:fc:b0:9d:c5:b8:
81:a1:7d:31:b1:44:17:f9:cb:c2:eb:76:80:2c:9d:4f:c8:53:
33:86:f4:18:e0:5a:0e:2d:c0:b6:12:55:68:2c:a4:a0:35:5b:
bf:37:c8:9c:8b:64:53:00:af:76:67:0f:5b:82:27:e7:c3:3f:
4a:33:5a:28:70:bc:8b:56:14:77:aa:a3:4c:4e:d5:b4:98:80:
85:46:7e:c7:2f:21:c8:30:11:ed:39:29:6c:c9:44:8b:b5:b4:
94:14:f2:dd:f5:13:3f:8a:4d:8d:6b:9f:86:96:89:1c:26:e2:
5e:29:54:ba:73:89:d0:8b:d0:2c:c4:7a:89:d8:36:a5:40:38:
55:8f:5a:11:9b:d8:e9:6f:08:fc:00:47:b5:26:19:fa:dc:fc:
cf:d2:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:44:12 2025 by rpki-client