
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: DLCK0Ebz1iewDeeebq+dcJN3Muy/gDtp7K+FBo/CN6o=
Subject key identifier: CC:8E:C2:CC:EF:5F:B6:BE:F0:80:F0:4D:53:2C:C8:0B:D8:0E:F9:E4
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019880C1D93AF9B0C216E8B61ED3AA161A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 12CA
Signing time: Wed 06 Aug 2025 19:00:44 +0000
Manifest this update: Wed 06 Aug 2025 19:00:44 +0000
Manifest next update: Thu 07 Aug 2025 19:00:44 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: SBfUsvmRnAtkFE1FUo7NkbaBgnTlJUj0CMZ3nk6ftfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:d9:3a:f9:b0:c2:16:e8:b6:1e:d3:aa:16:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Aug 6 19:00:44 2025 GMT
Not After : Aug 7 19:00:44 2025 GMT
Subject: CN=cc8ec2ccef5fb6bef080f04d532cc80bd80ef9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:39:4a:83:f6:62:ef:9c:4d:f6:78:da:e6:
89:98:2d:aa:4a:6f:2f:33:d2:91:69:96:c2:c5:69:
99:70:54:3c:87:3d:44:97:dc:db:56:9b:7b:1b:0d:
c2:a3:79:3c:bd:59:fe:15:31:66:20:7d:69:3c:bc:
ea:29:62:57:a7:04:80:6c:a5:57:22:aa:68:63:7e:
a7:be:cf:83:33:cc:1c:26:b7:65:f6:d5:3d:32:3b:
0f:d9:82:53:8a:14:7f:d4:c6:1f:7e:fa:18:a6:db:
bf:0f:ce:a8:16:3a:d1:ea:6c:c4:79:8d:40:0f:3e:
29:51:40:29:90:9c:04:61:c4:1a:54:04:8d:e7:84:
c7:fb:fb:dd:df:41:f2:da:ac:8e:7d:05:42:0c:e3:
14:a8:6b:67:7a:b8:f1:2c:38:af:91:a7:1e:5a:45:
5c:85:a5:13:19:ae:5a:2f:6d:d5:41:3f:d9:e8:84:
2e:8b:92:fd:cc:62:1e:0c:3d:28:fc:01:7c:ef:7c:
39:51:e4:01:44:73:dc:16:ed:4f:c9:0d:53:7c:5a:
ab:f4:12:fa:80:e2:a4:f6:d7:85:c4:db:b9:83:28:
c5:ba:3c:ee:9c:1e:ff:8c:a0:82:8a:c4:a3:11:27:
26:a0:94:8b:e7:1b:5c:c5:f1:a6:0c:78:c5:29:59:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:C2:CC:EF:5F:B6:BE:F0:80:F0:4D:53:2C:C8:0B:D8:0E:F9:E4
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:85:80:d6:12:0b:8e:51:06:ca:aa:44:1a:4f:b9:7a:7a:
f3:5e:9c:93:91:46:ba:e4:97:a8:fa:dd:6a:b3:78:03:ea:60:
c3:c2:e3:80:43:77:a7:c8:f2:1d:ac:2c:06:e2:5b:eb:66:e3:
80:30:fe:01:7f:ed:07:c3:31:a8:49:64:89:29:6a:96:26:fb:
de:39:28:59:77:9d:a0:52:87:96:b7:93:3e:5a:ed:d6:62:ef:
c5:60:3e:f8:89:89:06:94:47:26:4f:76:f9:63:d2:51:70:4f:
2a:66:d3:21:1c:a4:84:85:36:e9:c1:25:7b:42:f9:ca:6c:96:
01:5d:e4:55:a3:34:d1:58:f7:be:1e:c5:e3:f6:13:c1:27:3d:
08:70:6b:d0:bd:cd:dc:cc:35:a0:e9:86:92:8d:13:0a:6a:12:
fb:17:95:d1:56:30:57:d6:d6:bf:7b:2d:72:69:e5:71:9d:c1:
a8:d2:b0:41:6b:14:49:3f:6e:84:c7:69:73:bc:76:03:b0:6a:
69:00:10:8f:ee:04:b1:36:d0:57:ea:14:7a:f5:08:ca:74:6c:
1d:99:a6:0f:17:88:da:77:48:d7:d6:b9:3f:48:8b:7d:ae:b8:
e4:77:a6:d8:0a:39:13:9f:08:56:b2:ca:e6:fb:39:ae:89:e8:
0a:86:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:11 2025 by rpki-client