Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: CulA3i7oTmfp2mbH7zQyesXzD0YsTZQFCoFc/0XjizA=
Subject key identifier: 40:77:9C:64:90:AA:E3:94:09:45:4B:0A:C3:4E:4D:23:FF:ED:A5:83
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 0198D583B5D98598B83F5877FFEF7C215C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 0406
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: 9hyBuzr4lVkKu4GmYM4FIkYCGgO5c9XUrok1TY3+/aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b5:d9:85:98:b8:3f:58:77:ff:ef:7c:21:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=40779c6490aae39409454b0ac34e4d23ffeda583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:38:c3:ee:ad:16:d5:75:1e:0c:d8:8c:92:
b6:a0:29:0e:41:19:70:3a:b1:61:9b:38:c8:84:ab:
dd:de:8e:e0:e4:f9:7c:05:b2:24:ef:33:44:bf:53:
98:9b:75:8d:30:3d:72:a8:d8:80:e5:55:d1:95:15:
27:c0:27:35:dd:a9:05:00:94:7b:49:fe:87:79:87:
54:d6:cd:12:62:e6:c7:91:3d:2f:eb:e4:e2:76:d1:
6a:46:4c:8e:c5:20:6c:f4:15:28:fc:1f:68:10:ca:
a7:ff:d1:ba:de:70:fd:be:b7:57:53:8c:73:34:99:
59:69:7d:30:b0:40:0c:5e:c9:1f:aa:c0:e5:2c:93:
6c:b9:5b:1d:bc:a5:46:8e:51:fe:b3:3a:52:b7:5a:
b6:d2:d6:5e:51:b4:b4:dc:4a:f6:90:16:32:f5:97:
c2:6f:e7:b7:a0:98:eb:69:f4:80:e1:bd:af:85:29:
4f:b4:b6:16:4d:f7:56:75:de:1f:d5:dd:ec:34:09:
87:4f:5b:fd:a4:2e:29:e8:38:fc:76:ac:0f:ec:7e:
cf:8f:4e:9b:6c:38:f8:bb:bb:d7:0b:43:42:5e:dc:
90:bf:38:8b:7c:fb:2e:3a:ea:97:79:bb:91:20:71:
35:5f:e4:cf:0e:15:73:6f:a9:e0:94:a0:bd:5f:a8:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:9C:64:90:AA:E3:94:09:45:4B:0A:C3:4E:4D:23:FF:ED:A5:83
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:56:13:aa:07:0b:6c:f1:52:ed:24:17:07:d8:34:9e:7a:ef:
6d:61:94:0a:af:25:e3:a1:41:14:f5:a0:1c:a3:a5:f3:d6:43:
91:ac:88:9e:92:f6:78:b8:44:87:ae:25:13:f7:fb:34:83:93:
d7:f1:8d:9c:a9:8e:fe:49:cb:2e:d9:12:8c:35:a7:95:e5:7d:
80:6d:11:a8:9a:ed:7c:2e:e2:96:8b:92:49:d1:9a:d1:77:03:
ba:c7:2f:d7:32:ea:e5:ca:0f:13:b1:19:47:df:a0:f4:6e:37:
7e:28:2a:6c:46:eb:73:ab:45:8a:72:72:9d:15:60:8c:84:55:
c2:7d:bc:a2:53:74:df:41:45:86:f9:30:d7:7d:8b:33:c0:f9:
40:9f:ce:e2:89:0b:21:0f:ee:ff:26:63:d4:99:2d:d5:6e:3c:
36:30:2c:04:2b:78:56:72:25:e7:83:67:42:ca:04:ec:c3:cf:
24:d7:1c:3c:eb:86:2a:ea:7f:9f:64:c8:fc:c1:30:4c:af:68:
dd:7b:25:b7:7e:f7:17:87:53:56:f1:fc:0a:53:d4:f9:23:07:
47:05:9e:6f:ba:9b:60:e9:ba:26:16:d2:b6:4e:00:74:31:1b:
6f:05:27:ee:47:3f:68:d9:12:9b:04:21:0a:d9:58:81:89:74:
d1:1b:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:20 2025 by rpki-client