
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: kmKcyFIvmy78K/ommppgWQ22szyYUzd/Z+7a2/RxdZw=
Subject key identifier: CB:17:82:42:75:F0:F9:97:DB:E5:CF:03:1A:7A:A8:23:DB:4D:7D:D1
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 01988D6AA905489788420511B51CB2DE6752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0CB1
Signing time: Sat 09 Aug 2025 06:00:34 +0000
Manifest this update: Sat 09 Aug 2025 06:00:34 +0000
Manifest next update: Sun 10 Aug 2025 06:00:34 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: w3cWkV/Z/8+HWT7mgia3Mhr7AGUOxq2dFU3DNOfesO8=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:a9:05:48:97:88:42:05:11:b5:1c:b2:de:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Aug 9 06:00:34 2025 GMT
Not After : Aug 10 06:00:34 2025 GMT
Subject: CN=cb17824275f0f997dbe5cf031a7aa823db4d7dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:66:2f:8b:81:c3:53:a1:c8:a4:f3:1c:99:
1f:1e:57:4f:ef:dc:d0:1c:20:b0:f9:7a:04:1c:f2:
ef:7f:b5:3b:f7:c0:52:04:c4:d3:82:35:d3:71:9d:
a4:88:8f:10:67:6a:7b:48:20:5d:73:79:1a:13:e3:
6f:1f:86:8d:97:32:23:51:c9:90:c4:4d:68:30:68:
a4:b5:df:26:d1:20:53:0a:7a:63:6c:a6:89:0a:48:
56:e3:80:08:f5:ef:6c:01:fe:1f:7d:ac:c5:fd:c0:
fc:fc:ae:f4:54:09:af:d4:68:8c:52:0c:a5:2a:39:
4f:ba:51:6b:7e:bb:04:d4:c4:12:82:a6:19:72:73:
46:c3:11:80:33:1e:df:8e:3f:1b:93:9e:c7:f9:09:
7c:4a:ec:a6:fb:ce:97:5e:1c:0b:39:23:f5:df:fe:
57:48:16:6c:64:64:66:b6:87:b7:85:b5:a9:bf:91:
f6:97:c4:3e:01:95:39:f5:76:c5:5c:45:62:0c:26:
a2:e2:2f:19:c5:d9:67:bf:ae:8f:50:76:72:3a:38:
2b:e8:78:fd:42:ec:f4:50:1d:a8:0c:a1:0a:b9:ad:
35:be:70:fe:a0:95:c8:a1:30:b6:f0:76:bc:13:3f:
1c:fb:be:97:e6:2c:9a:99:0f:0f:ff:2c:99:41:c5:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:82:42:75:F0:F9:97:DB:E5:CF:03:1A:7A:A8:23:DB:4D:7D:D1
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:68:19:15:07:fb:19:46:79:b7:d2:0a:b3:82:8c:a6:b3:c6:
6e:c2:b7:65:29:11:35:5e:90:83:58:28:1e:1b:58:78:bc:48:
14:ee:18:0a:c4:f6:08:a9:f9:6d:9c:f8:d5:ac:84:c7:e9:33:
46:85:56:4a:df:f9:78:55:c7:d0:1c:8d:36:e9:5a:cb:34:48:
0d:b2:b5:40:de:dc:75:9b:f9:eb:3c:5a:8c:2e:74:ef:02:54:
ee:0a:03:35:36:b0:96:93:79:08:b3:c1:53:57:78:ef:a3:e1:
5d:5a:cb:35:20:74:14:0c:24:de:61:38:cc:69:10:e0:e3:6a:
e8:40:12:a5:bc:91:bf:86:b4:62:88:20:c5:69:56:29:8a:e0:
33:d8:0b:43:e2:6f:f6:73:ab:c5:fe:ea:8c:88:a8:62:da:37:
c7:79:5f:f3:02:85:6d:ba:43:4e:6a:86:cf:42:af:92:de:3d:
e9:99:88:0a:ab:5a:e8:8e:12:6f:8d:40:4b:1e:59:90:de:c1:
7e:7d:98:f7:d6:a0:00:61:48:b2:ff:08:08:3e:6a:d7:50:89:
a0:6c:31:bf:4d:09:e6:ff:eb:e0:66:a9:c8:24:a2:9f:f1:fd:
f2:07:c6:76:23:05:e7:1e:17:d1:84:6f:6f:d1:9e:fe:09:53:
c4:8a:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:43 2025 by rpki-client