Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: JvHu3w8FUaqC1cyTHgZLV7nx76tSEz8XffXDQtmimnw=
Subject key identifier: 78:C1:97:81:88:45:71:E4:5F:D8:91:86:ED:FD:7A:79:6F:5B:37:46
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 0198D697FADAB66F4BCE0AB546151AB01208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: FA
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: UT+oqcBMpydDA6zBpgLOxOJRYHfZcDirO64tM7MboJ0=)
2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fa:da:b6:6f:4b:ce:0a:b5:46:15:1a:b0:12:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=78c19781884571e45fd89186edfd7a796f5b3746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:94:d3:51:b8:17:09:8c:8d:6d:50:3f:d4:
08:29:41:ca:95:13:69:4b:17:1e:e0:68:2c:c7:aa:
20:d5:33:f5:83:7a:cd:39:2d:50:72:13:b9:ac:44:
af:13:4c:e9:88:9f:f5:aa:18:a9:07:42:da:72:cf:
47:c1:7e:50:9f:c2:37:ed:50:84:28:2e:1f:c0:19:
9d:00:66:8a:5c:d7:0b:78:f6:43:cd:43:ac:4c:9a:
fb:1a:a0:64:d5:8f:74:88:b4:83:72:41:a4:55:64:
c1:7d:a5:0a:c9:0b:5a:9c:af:ea:00:d7:07:e0:03:
0e:12:72:22:b4:c8:d0:38:8f:8c:0a:d4:ef:74:69:
48:9d:63:f3:bc:a7:64:52:a2:50:a5:ac:98:91:eb:
d6:53:3a:5c:e4:fe:0e:e4:50:c3:1e:7e:04:cd:f5:
95:82:22:e2:22:55:bc:11:7e:3b:f4:98:7b:79:fd:
43:b1:2a:eb:50:90:29:ce:85:72:13:1d:42:58:da:
4c:5b:e9:b9:97:5d:da:3c:67:83:0f:0e:0f:cc:18:
70:5b:d6:d5:52:0f:9b:97:64:4a:a2:bf:67:18:d6:
38:8e:bd:d1:b9:30:78:aa:5a:91:72:87:53:4c:a9:
24:c1:80:1a:f3:a0:00:ed:a7:99:70:d2:ac:05:c6:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:97:81:88:45:71:E4:5F:D8:91:86:ED:FD:7A:79:6F:5B:37:46
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:90:a4:aa:8d:39:1b:30:ac:ae:1b:97:b7:20:93:17:38:
de:c7:b2:07:09:7c:c7:b6:b9:42:c3:ee:16:00:d2:cf:3a:7f:
86:49:ff:28:9b:78:60:8c:aa:11:de:40:01:c0:9e:68:f7:95:
1c:3c:a8:48:a5:1d:8c:0c:d2:9f:eb:79:4e:ac:72:12:f0:28:
cb:f3:c0:ef:73:e9:d4:b6:c7:da:76:64:5c:40:bc:e7:8b:df:
e4:88:5c:c6:2d:33:ec:0c:5e:14:c1:13:d0:dd:c0:a6:39:3e:
56:ff:ad:6e:07:5c:ea:86:c7:3c:c8:76:4e:f7:d5:ce:24:6c:
7b:52:22:f1:47:d0:fd:5a:11:13:6a:33:e5:d4:22:d5:7d:58:
c6:5a:6a:d5:83:d2:96:ab:59:08:57:22:f6:ca:4a:13:93:04:
32:4e:8a:27:e7:da:51:b9:16:45:c6:e1:bd:6f:8e:9f:10:2d:
34:ae:c3:44:99:21:b4:d4:ff:73:32:a8:32:40:27:a3:f4:3b:
a7:23:9c:bc:a6:f9:60:7e:1b:92:4d:e9:13:e4:a0:c3:52:c8:
1b:c6:0a:33:c8:57:cc:fe:5d:20:5d:69:59:61:b8:43:57:a1:
0a:f7:45:a1:a7:7e:12:ae:98:36:46:71:0e:b8:fc:f8:14:d9:
30:d5:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:55 2025 by rpki-client