Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: wujzab+MEy61LCORzuR3No/fXp7o3DC/t7n2C8a4+gQ=
Subject key identifier: 5C:EC:A2:55:23:C5:E3:9E:95:16:63:81:BA:F8:0F:3A:37:2B:8D:F0
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 0198D4746AD76128221D9DBD5529C2943FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 04A2
Signing time: Sat 23 Aug 2025 01:04:15 +0000
Manifest this update: Sat 23 Aug 2025 01:04:15 +0000
Manifest next update: Sun 24 Aug 2025 01:04:15 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: 98spO7N2f46gGBKk6o0ipzcmssiDA+v5G0c8X/bJeWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:6a:d7:61:28:22:1d:9d:bd:55:29:c2:94:3f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Aug 23 01:04:15 2025 GMT
Not After : Aug 24 01:04:15 2025 GMT
Subject: CN=5ceca25523c5e39e95166381baf80f3a372b8df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:5c:bd:33:f9:0b:30:92:f3:8c:40:70:00:
ea:b9:45:08:b9:75:08:9c:96:74:4b:e6:c0:6c:04:
8c:43:70:cd:fd:8a:a5:37:0c:88:32:db:a2:58:97:
e3:9f:58:a7:d4:3d:22:85:0f:c5:e0:75:f0:32:2a:
79:fc:c0:21:30:93:cc:90:8a:5a:d5:74:61:5c:58:
a1:ef:11:e8:db:ea:9a:7e:92:fe:13:72:16:0c:fa:
ba:04:0d:53:e6:a5:95:89:06:08:3c:a7:b0:c4:40:
19:f5:1a:19:29:02:8a:51:07:87:5a:83:9c:7a:e0:
41:0c:01:c6:87:aa:9d:65:5e:a3:1a:c4:9d:d5:65:
5a:db:c5:c9:6c:64:fb:87:3e:bf:2b:e4:4c:06:99:
ec:2a:4f:84:93:07:76:2b:e2:62:e4:38:6b:23:72:
9b:7e:66:5a:f8:4c:f7:5e:64:b9:e5:ca:3f:fb:1b:
87:52:c5:c0:df:63:1e:1d:f2:de:16:30:92:ed:05:
2d:c1:50:1f:39:4c:c7:45:5c:c1:d5:9d:86:b0:10:
fc:85:a6:e0:b1:b6:36:f8:f5:4f:87:a5:a6:9e:6e:
f6:11:8d:7d:ac:7e:47:f9:33:1d:ab:00:34:41:22:
65:14:ae:b1:a1:95:f0:94:84:aa:c0:28:97:ce:3d:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:A2:55:23:C5:E3:9E:95:16:63:81:BA:F8:0F:3A:37:2B:8D:F0
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:5a:27:51:24:7a:d4:b9:e2:9f:ec:05:4c:da:72:df:b7:
2b:cf:07:f1:98:68:91:c7:9a:df:39:cb:db:29:8b:3a:34:b6:
5e:c8:bf:b7:57:0b:97:ca:57:48:a7:5b:48:c7:53:59:ef:10:
55:f6:34:69:ea:bc:16:9b:59:48:e7:87:ba:52:17:41:03:c2:
67:51:81:ef:0e:e2:be:da:07:10:c0:09:6b:ff:9a:0b:ce:e7:
51:c0:cc:a1:69:15:e3:52:3e:b1:63:9e:50:35:30:41:50:55:
1d:09:d9:72:5d:f1:30:9c:1b:31:8d:13:12:a5:e0:a5:5c:de:
a9:5d:7d:6c:81:a9:df:7a:34:e8:a0:4c:2b:79:88:fa:a8:8b:
46:18:05:a8:32:10:0c:2c:8b:12:50:55:ca:8b:33:e1:f4:bc:
b1:2d:30:4f:7c:0e:6c:db:c4:2a:16:86:3a:40:63:d8:de:eb:
5a:2e:9c:fc:bd:c7:a0:97:9d:c6:7c:cd:39:af:7c:98:dd:77:
ad:b3:f6:0e:d4:d0:c1:dc:35:ff:d5:60:10:9b:8a:42:8a:7c:
32:5c:6e:c1:cc:9b:cf:6d:a5:10:4d:ba:cd:e3:ee:ef:68:21:
60:32:78:7e:dc:cc:0b:20:5c:f5:0b:80:07:a3:24:fc:bc:81:
88:6c:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:16 2025 by rpki-client