Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: sqNXxj59OYm4dISn7+/LlH69FL7ubR8FHu0WOYvvkE4=
Subject key identifier: 86:4D:15:03:F6:95:4F:0B:E4:89:71:92:55:14:B9:E7:3F:65:DF:8D
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 0198819E452186F426C127DA88CE6BA047E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 23:01:29 +0000
Manifest this update: Wed 06 Aug 2025 23:01:29 +0000
Manifest next update: Thu 07 Aug 2025 23:01:29 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: Eay1/AIgfvEpMpyQpr+Y9S0Av4FpQ+k6r+z+pZPTtoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:45:21:86:f4:26:c1:27:da:88:ce:6b:a0:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Aug 6 23:01:29 2025 GMT
Not After : Aug 7 23:01:29 2025 GMT
Subject: CN=864d1503f6954f0be48971925514b9e73f65df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:45:ff:9e:7d:c8:f3:18:b9:7d:90:af:3e:
19:98:fe:70:a3:2a:3d:ec:2f:0f:88:c1:a2:bb:ca:
8f:15:72:51:90:73:46:c7:8f:a7:21:5b:f1:07:09:
ea:6e:54:0e:06:75:1b:c9:b6:49:73:16:01:a4:91:
a2:1e:60:3e:ec:3b:2d:a8:6a:48:04:da:39:4e:c0:
6c:d3:fb:60:00:a5:87:cb:7e:a0:2b:5e:cc:5a:2d:
b9:3c:f1:a0:90:d8:f5:32:93:3d:b5:e1:80:f8:8b:
83:60:bd:b6:85:c3:85:09:67:48:5f:43:68:b4:fb:
d1:ae:05:6c:ef:a4:3e:c1:49:90:ee:25:cd:87:68:
38:ba:de:af:8a:db:5d:aa:c6:9b:1a:a8:f5:00:66:
26:da:4a:fa:36:10:51:fc:94:35:4e:95:1c:9c:97:
30:cd:08:cf:6b:8b:39:57:05:2b:d3:03:77:51:1a:
46:91:cd:d0:f5:29:56:c1:43:13:43:8a:46:52:81:
27:30:64:96:7b:dd:18:a4:5c:4e:ca:9f:8d:0d:a2:
9c:04:78:a9:95:0b:8a:e0:38:08:bb:d1:4d:12:88:
d5:e1:81:4f:38:e3:db:0e:0c:18:57:c5:3b:0b:5c:
d1:05:1e:7a:e9:a8:44:6d:32:bf:da:9f:a7:b1:45:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:15:03:F6:95:4F:0B:E4:89:71:92:55:14:B9:E7:3F:65:DF:8D
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8a:ff:f7:f7:4f:fa:60:f4:72:e4:f4:8d:93:4e:0a:4c:d7:
46:b4:a7:a6:2b:b5:a1:51:0e:27:de:0d:5e:39:12:6e:a6:b8:
75:c8:3b:f7:7b:4c:ad:3c:1d:39:31:04:73:2a:9f:59:d2:4a:
fe:23:6e:c3:d0:fd:3d:0b:af:ad:68:30:b5:ee:64:2f:18:91:
77:52:ef:2c:74:dc:1c:ad:fa:a4:e4:e4:59:f8:62:3b:53:2e:
e3:04:61:6c:54:f4:8d:d8:f2:4a:16:5f:d9:7e:ad:4e:b1:1f:
88:d6:1d:a3:e9:80:b0:3e:02:c9:40:dc:52:8c:cb:e6:ab:ca:
77:20:71:f1:68:90:c9:16:cb:97:47:23:f3:c2:62:39:51:e7:
68:fb:e2:99:b5:74:0c:8e:77:7e:a0:bf:a4:d8:f6:70:71:c8:
5a:97:01:f5:d5:f2:99:d1:75:14:13:8a:63:0c:36:44:ff:38:
64:5d:d2:1c:2c:7e:d2:5a:2e:e0:4c:d3:6a:fc:52:b6:19:00:
9f:41:c1:47:99:af:ca:45:1a:a6:bc:1f:95:54:f5:93:c7:52:
90:e8:26:ad:f5:f7:ef:73:c7:d2:48:21:38:6b:6a:c2:f3:7f:
0e:81:b3:11:ec:a4:96:34:b3:18:9a:34:de:96:86:1c:fb:cf:
32:c6:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:01 2025 by rpki-client