Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: O7PFa1QlscncGMRGlCypws9LpEJezsCFvGOM2GDec7Y=
Subject key identifier: A9:DF:24:28:5C:EC:D4:92:A3:C4:0D:BE:4E:19:ED:25:AD:9E:81:89
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 01987BD2D8FBA94977B55D88BFE45C7CE377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 0165
Signing time: Tue 05 Aug 2025 20:01:12 +0000
Manifest this update: Tue 05 Aug 2025 20:01:12 +0000
Manifest next update: Wed 06 Aug 2025 20:01:12 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: Ewpc9vL7cRuAMcVkqDIc67UkgTKfA+5qk9Vvd1+tEyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:d8:fb:a9:49:77:b5:5d:88:bf:e4:5c:7c:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: Aug 5 20:01:12 2025 GMT
Not After : Aug 6 20:01:12 2025 GMT
Subject: CN=a9df24285cecd492a3c40dbe4e19ed25ad9e8189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:b0:e0:78:14:39:f4:0a:17:f0:1e:b9:d0:
6e:05:2b:cc:de:89:4f:54:f8:54:91:e9:9c:53:37:
54:16:d9:55:90:a2:94:20:c4:d8:67:b0:ba:89:60:
1e:47:65:d6:2b:66:e4:58:af:6d:d1:e3:53:7e:0a:
aa:c2:e4:47:ff:31:fc:0a:4f:93:9a:6b:58:31:7e:
ca:4d:2f:58:dc:92:42:f3:96:f2:92:49:1b:e0:c7:
1a:6a:fb:c0:3b:e2:76:8d:5d:71:2c:21:72:86:22:
4f:4e:63:5a:0f:74:aa:bf:17:3b:10:46:c6:b0:0e:
66:ae:08:16:dd:a6:26:70:c3:ab:e1:11:76:f7:cd:
1d:51:c2:cc:f1:b4:4c:98:cd:06:c8:0f:f4:d2:ee:
f7:05:19:16:58:b4:4e:51:11:f5:e8:81:a3:8c:f8:
92:55:bd:03:43:e7:44:05:22:f9:39:34:f5:e7:04:
25:8c:7c:25:82:69:54:a6:92:dd:8c:39:f6:56:9b:
4a:1a:44:f4:6b:af:82:a6:98:93:99:97:bb:e4:70:
93:fd:a3:93:53:d8:de:95:59:83:db:27:ba:9b:f0:
f6:67:d9:85:7a:0b:20:02:50:70:58:73:70:af:dd:
52:0c:df:b3:f8:d8:89:be:75:01:82:e3:ed:0b:ce:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:24:28:5C:EC:D4:92:A3:C4:0D:BE:4E:19:ED:25:AD:9E:81:89
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:72:8c:18:fb:76:ba:e9:88:03:a8:fb:99:87:69:ba:a9:
49:a0:60:c8:5f:87:67:04:94:b8:48:81:2d:6f:b7:c7:4d:9e:
4b:ca:85:a6:88:d0:bf:16:92:76:dc:6a:23:bb:8d:dd:f2:38:
b9:26:a8:92:77:25:07:5f:26:4c:b0:5a:ea:0d:cd:5b:9b:2b:
d4:9d:31:f6:84:b9:5b:c2:89:ca:99:83:9f:b2:e9:ca:1f:18:
bd:b4:2d:d7:29:03:f7:a2:be:1d:36:bf:17:92:15:a6:98:50:
ed:d6:5e:75:14:17:52:0d:81:65:56:a6:2d:55:e4:59:7a:4f:
4a:c7:63:28:db:8c:c5:35:15:79:64:72:58:cd:47:33:2e:81:
99:35:4d:56:09:71:d6:36:62:6c:01:47:df:e5:8e:2e:1f:67:
87:09:41:f5:5f:f5:fc:88:0c:bb:f3:d5:bc:16:c4:85:7c:6e:
86:46:4f:f0:de:7d:e9:bc:b9:0f:b5:14:c0:45:40:80:80:7f:
5f:2d:53:db:40:b2:83:d6:cc:d3:30:38:77:03:81:16:4c:13:
be:f6:38:c5:5d:dc:fe:97:0e:94:00:8f:44:76:81:2a:0e:7d:
ac:7f:89:db:b9:d7:47:0f:d5:75:da:52:11:27:e4:12:0b:bf:
5a:e4:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:00 2025 by rpki-client