Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: S96zx+rLGCaA7I3SbcB9YwEq4Qp+r0c4VLUVE1t9QPA=
Subject key identifier: 36:5E:29:8F:FE:9C:1C:F7:EB:6F:49:30:E9:D1:5C:7E:4C:69:27:2E
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 0198D66003016BD0D6AFA51C1392B94DDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 04CF
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: 7jZKkUeEBSBQ4VTaPfz3nNwK8f1Sv2tF8CkInI2uqzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:03:01:6b:d0:d6:af:a5:1c:13:92:b9:4d:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=365e298ffe9c1cf7eb6f4930e9d15c7e4c69272e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:0c:0e:c4:a0:87:43:7a:88:b2:bb:31:89:
ec:5a:9b:30:c3:a3:bc:4e:0e:5a:de:c7:a9:c3:3c:
06:6e:4b:e8:ea:a9:ad:1c:8c:65:a5:c3:89:14:cc:
eb:d7:df:f9:d1:d7:65:21:0f:86:32:9c:3f:19:3b:
d6:39:d7:36:7f:0e:c8:6b:18:a0:47:7b:8b:9e:ac:
e5:fd:28:8c:34:c6:f4:06:3d:e1:34:a2:c2:66:fa:
d1:d9:bf:f6:3f:39:e6:20:7a:0b:a4:97:b3:ed:6e:
47:92:51:99:f5:08:26:82:cb:45:1c:b4:64:13:af:
c6:5a:5a:ff:6a:91:d0:d4:32:4a:db:b1:4d:35:34:
33:66:9b:24:4e:00:a8:a0:a1:e9:3a:a8:cf:05:48:
16:72:29:59:ac:15:e3:31:84:7c:21:05:28:6f:60:
24:5f:dc:f0:7a:04:41:a7:4f:16:75:0c:47:4f:dc:
91:1c:b1:57:15:97:51:81:e5:a1:0a:96:8a:19:81:
69:b0:b7:8a:f7:75:8f:85:ca:a7:e1:14:8a:57:3e:
bd:a3:9e:46:75:40:75:cb:5f:ff:af:16:3b:bd:04:
d0:87:87:83:76:44:c1:26:a4:0f:3a:fc:ea:26:a8:
03:56:7b:a9:d4:58:68:1a:52:96:36:e8:a3:8a:9c:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:29:8F:FE:9C:1C:F7:EB:6F:49:30:E9:D1:5C:7E:4C:69:27:2E
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6b:26:17:b3:31:bc:b1:ec:e7:55:ba:64:49:78:ee:fd:d0:
a1:c2:a0:82:42:1e:c7:03:e5:d3:06:2a:d6:c4:57:47:36:41:
89:a2:89:c6:cc:25:df:29:3a:31:47:90:d5:73:68:b4:35:d4:
75:66:ba:25:07:9b:e3:8a:58:76:dc:94:e1:71:5f:d2:e4:44:
ce:0b:c8:07:8c:e6:16:04:5b:50:64:69:fb:35:11:b3:f1:44:
2b:10:9b:4a:10:9b:62:32:f6:a1:5e:10:75:36:1d:57:00:6c:
a6:09:d0:bb:3e:45:79:fc:86:15:9c:c4:45:71:cf:9b:fb:ad:
c2:18:35:06:af:b1:ce:b1:b7:2c:1e:8e:bf:e3:4c:e9:50:e7:
83:ad:d0:18:34:78:a0:1a:d9:2b:a7:23:f8:ab:56:ce:51:2f:
d7:0a:2f:14:8a:72:ac:2b:99:6d:aa:e6:6d:33:2a:70:1c:c1:
67:2b:32:e4:2b:38:f3:90:fd:2b:2d:71:0c:fc:05:51:ef:50:
96:67:1c:6a:4f:51:60:a3:c3:b9:5c:d4:96:a5:23:fa:8e:8e:
3a:a3:ff:8b:79:5c:a8:96:6d:53:62:d9:c9:f1:b3:0e:08:ee:
10:51:2b:37:cf:9f:f9:1f:cc:4a:41:d1:f3:24:55:62:03:71:
12:35:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:19 2025 by rpki-client