Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: nTlRyvD+RJVC6p5hnNsvHhPiSos6t9IvYuW5Ps+/K/I=
Subject key identifier: 3D:4F:1B:E8:AA:73:7C:E6:8D:70:11:F7:3C:E5:F0:50:AD:6E:74:BE
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019880C28F79C5743934BF4423121BE56F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 19:01:31 +0000
Manifest this update: Wed 06 Aug 2025 19:01:31 +0000
Manifest next update: Thu 07 Aug 2025 19:01:31 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: A2vytmXxck8X/OrA2Iy3LeMNeIEV6kmQKqp1Ckp1k7M=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:8f:79:c5:74:39:34:bf:44:23:12:1b:e5:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Aug 6 19:01:31 2025 GMT
Not After : Aug 7 19:01:31 2025 GMT
Subject: CN=3d4f1be8aa737ce68d7011f73ce5f050ad6e74be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:9d:9e:a1:35:93:e2:4f:2f:17:a8:28:d1:
35:a5:80:fe:46:87:2c:8d:57:d0:6c:dd:b1:c7:67:
8d:d5:b2:e9:69:f8:68:04:7a:2a:bd:c6:6a:3a:e8:
b9:ea:80:03:01:1c:29:ea:f7:bb:02:80:7e:26:66:
f9:71:04:67:0d:bb:36:58:00:e0:84:e1:9d:f8:c8:
30:39:e7:68:c0:89:0e:5d:e4:11:50:f1:7a:4a:f0:
95:af:f7:12:34:b0:b1:d2:0d:5b:80:ce:e3:8f:53:
75:8d:b4:96:cc:bc:32:a8:b1:13:0e:b3:f2:41:d0:
19:78:b0:bd:48:08:b8:7c:f0:c0:24:f4:22:d3:01:
ef:dc:f6:58:62:55:33:ae:17:25:8a:32:a9:bd:a0:
1d:25:ff:fb:ee:4e:b8:5a:ee:e0:1d:01:59:c9:e9:
cf:b0:eb:f3:86:9c:c6:31:a2:2e:c8:59:94:c4:14:
7f:d5:80:00:32:20:9c:b7:4d:d1:66:34:7c:0d:4c:
fa:8d:ee:e8:d3:c3:a8:a9:dd:81:cd:4d:79:23:99:
3f:cb:df:dc:73:4d:1d:17:e6:ef:4e:9b:35:70:45:
02:50:d9:66:30:f4:b2:a8:ed:ed:bc:39:92:94:0f:
48:a2:13:f9:97:f2:d4:bb:3a:4e:ed:c3:59:4c:47:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4F:1B:E8:AA:73:7C:E6:8D:70:11:F7:3C:E5:F0:50:AD:6E:74:BE
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:65:48:54:b1:60:f9:6b:f9:28:c2:1b:79:d7:2f:1e:05:e2:
b0:4d:16:93:ad:eb:81:5c:38:b3:5e:25:27:79:47:a7:92:46:
3f:0f:1a:27:10:67:8a:73:65:94:1d:32:e1:19:32:0d:76:b3:
cb:4e:f4:85:35:2d:3e:42:1a:c2:67:43:65:f5:1e:7f:27:14:
0a:07:da:a5:c3:73:a8:68:ca:c9:99:3d:88:b6:1b:e2:49:c7:
d0:55:e8:d4:48:49:72:cf:be:e6:ae:e5:b6:7b:95:eb:f9:74:
83:4b:bd:be:44:56:13:e4:44:54:9b:ec:38:af:f4:a7:fb:d6:
f6:5c:8c:94:96:31:ec:98:4b:70:0c:bd:3e:d3:3b:25:f1:14:
dc:7b:46:a0:aa:4a:5d:6e:e1:02:65:76:5a:6d:76:79:fd:79:
6f:85:cb:98:e6:7e:b5:d1:92:33:20:5e:e5:73:01:0f:1b:c2:
b8:eb:fc:e7:06:80:d9:26:52:0d:72:0f:c7:aa:ba:48:1e:09:
31:72:15:12:e6:05:f3:a3:3b:18:35:ec:91:1e:29:43:1d:f1:
87:d5:08:02:61:b4:d7:28:32:2f:7b:d5:31:d2:38:cf:ed:ec:
74:a1:48:c0:73:53:8a:06:3c:3f:e9:76:a6:9f:29:e2:64:0c:
17:aa:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:41:10 2025 by rpki-client