Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: O2/BPJIdNnwtdvbxG+q46h7GEZoHHnFJMol/WqSNlEk=
Subject key identifier: 2E:26:A8:CE:17:8D:0D:64:D9:A0:9F:4D:B3:E8:66:87:25:B8:F6:81
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 0198D7057C6C150E2E3722137CB658A2EAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0DCA
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: gs2WWX9o1s7fEerCxxY15LH7Fh4ZJJX4ZK2fB8+L9i0=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7c:6c:15:0e:2e:37:22:13:7c:b6:58:a2:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=2e26a8ce178d0d64d9a09f4db3e8668725b8f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:40:d0:0b:55:b9:cf:f7:99:7e:ee:7d:83:
24:c0:24:b6:cf:fa:e7:71:e7:3e:7f:a0:e8:2a:88:
74:6b:34:17:f5:41:f1:d8:e9:e3:76:a5:22:1d:03:
be:37:59:1e:0b:82:23:78:a0:6d:7f:d4:d0:97:cb:
88:86:e6:c8:f6:45:46:9e:2a:9a:db:5c:4c:f2:0b:
ce:8f:da:b2:a0:de:4e:35:3c:11:cc:b3:b4:fc:82:
8f:c5:cd:d2:cf:4e:28:23:83:63:e7:25:68:be:0b:
cf:6b:d6:38:bf:ca:34:26:79:03:60:22:fc:d1:ce:
a8:d6:9c:91:fb:28:b3:2e:31:cb:01:1d:cb:56:bc:
bf:6d:49:1a:1e:d8:7a:0b:9a:35:8e:b7:9d:12:b6:
0a:2e:03:9d:2e:7a:a7:53:47:85:7b:cb:a7:96:1b:
bd:7b:08:7a:ff:49:84:86:65:d3:ac:da:19:50:2b:
f3:38:cb:7a:63:8c:1b:16:5d:6d:cf:8f:84:55:de:
d4:0f:28:4a:9b:e7:7d:31:e7:0b:1d:eb:00:f0:3f:
e1:2f:c7:44:ff:8c:25:46:99:73:91:2a:8a:ab:a6:
e3:98:a3:54:13:b9:a3:9e:81:93:45:b2:9b:62:76:
aa:ed:76:1f:08:57:36:e8:8a:2a:72:67:da:64:46:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:A8:CE:17:8D:0D:64:D9:A0:9F:4D:B3:E8:66:87:25:B8:F6:81
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:24:2c:59:ca:5b:1e:76:fa:ba:8c:a1:e8:af:2f:53:09:
94:05:12:00:e6:67:5d:89:e9:47:7b:d2:77:b3:81:1e:86:16:
24:48:53:1b:d0:96:da:eb:d8:96:9b:f1:b8:b2:5f:f7:01:84:
ee:cf:8c:5c:20:70:2d:47:94:60:67:40:00:f1:11:63:a0:03:
e3:a4:20:dd:89:45:15:f2:47:e2:07:53:68:5c:a9:4e:00:bc:
f9:42:2c:33:75:1f:25:8e:c5:be:b7:29:41:8d:a7:2f:0c:48:
77:f8:d9:56:93:81:e1:f7:e3:cf:31:00:56:e0:20:89:86:c9:
84:3d:72:c4:ce:93:34:92:62:90:aa:79:02:fe:0f:1e:56:5a:
ee:3d:36:1e:9a:44:00:6d:25:7b:e7:a7:d0:f5:3f:d5:59:21:
01:a2:b9:eb:ed:42:05:f5:47:c4:60:d4:8b:b8:29:62:02:c6:
88:57:c9:df:7d:44:b6:64:07:12:72:f8:11:40:be:d8:0c:f8:
81:79:b8:a5:f5:11:21:b0:10:47:2e:75:b5:b5:31:57:d0:31:
94:a1:70:0a:23:0e:e9:72:8e:1b:cd:4a:e0:ad:59:13:99:37:
59:ad:7c:e7:28:fa:f6:28:7f:04:00:28:08:55:34:0e:28:4a:
c0:65:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:48 2025 by rpki-client