Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: Oke7x2w0bc38mmpg86Abyi8Dcg6wPszFMcRkBh1iuzw=
Subject key identifier: E5:CC:52:A1:3C:A3:2A:0B:BE:F0:17:5A:96:EF:4B:F2:01:83:3F:57
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0198D85043F747C723EA2F9EE1F1F747EAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 19:03:15 +0000
Manifest this update: Sat 23 Aug 2025 19:03:15 +0000
Manifest next update: Sun 24 Aug 2025 19:03:15 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: bKfJPKXFXJneollnud/83ZAYDebTGXGGz6dnLzRPRmE=)
2: s1SLHtKOtkgq5r5rHF__j6OHoGY.roa (hash: KY4xp5ySp/G6GnIfRT4waP6fnoRJIDEZEgF7zNS/QEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:43:f7:47:c7:23:ea:2f:9e:e1:f1:f7:47:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Aug 23 19:03:15 2025 GMT
Not After : Aug 24 19:03:15 2025 GMT
Subject: CN=e5cc52a13ca32a0bbef0175a96ef4bf201833f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:60:b1:29:d8:3f:b9:71:8e:af:87:69:06:
93:23:4e:d0:b9:52:84:57:aa:70:16:be:d8:6e:72:
7f:db:4d:4c:89:4b:43:2f:4b:17:79:0e:b8:73:82:
df:fe:8b:28:f9:8b:22:a9:1b:e5:a1:7e:13:f1:b4:
32:52:17:de:39:aa:16:26:cc:dc:d8:b6:75:fc:03:
85:1e:e2:cc:9a:5d:00:6e:42:8b:9c:a3:85:77:6c:
0b:8b:60:b3:6f:34:b9:31:6e:71:6a:ac:0a:ef:7c:
98:12:48:46:72:a1:1f:7b:ff:0a:82:df:21:f1:51:
ac:41:a7:a7:2a:2b:47:12:78:88:e0:ed:bd:d0:fe:
6c:e0:56:6b:3a:f2:66:ea:5c:80:8b:49:ae:eb:a3:
fc:66:db:be:cd:9c:3b:2e:08:b7:6e:d2:86:5d:f0:
f7:54:b7:cf:f5:28:5d:d4:35:68:15:98:47:ac:1a:
23:96:88:46:11:89:a8:f9:28:2a:d6:6c:82:63:2c:
0e:3a:e9:19:81:2c:f3:59:d1:20:e7:db:ef:10:bc:
b2:29:a6:a0:91:28:91:4b:f0:48:82:60:8d:e4:85:
e6:64:9e:8e:3d:52:2a:a8:81:2b:4c:dd:77:83:36:
f1:b4:f8:62:17:d5:0f:1e:06:fd:bf:f5:07:0a:68:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:52:A1:3C:A3:2A:0B:BE:F0:17:5A:96:EF:4B:F2:01:83:3F:57
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:64:99:bf:e0:f8:ee:d1:ec:74:9a:0f:f1:69:4f:24:16:3f:
02:e2:da:14:3e:f7:f8:ee:b3:cc:bc:d2:ab:fc:97:fc:7f:74:
db:86:f6:b7:5a:22:80:04:bd:61:7f:c0:77:52:ad:4e:38:23:
70:f1:b0:98:94:a4:4f:e0:eb:99:de:6c:4f:93:a1:c9:26:82:
0c:3a:26:f0:f1:b1:09:7a:3d:e2:01:f5:4d:d1:b1:f0:95:52:
ee:5e:9a:77:3b:2d:3d:ed:04:03:ab:18:93:c9:14:b3:0e:24:
14:d1:11:e7:00:3d:30:2e:66:a0:bf:65:89:c4:17:ca:2a:bf:
59:b7:e0:82:aa:e0:08:5f:12:2f:15:fc:fa:9a:fd:d6:9b:97:
00:29:e7:7a:f7:2b:5c:af:84:2d:5e:1d:26:b4:88:a6:4c:66:
20:3f:23:98:f4:c8:a8:10:f3:c7:5b:73:26:6f:cd:47:6b:57:
b2:04:f1:49:a9:34:31:ed:df:8b:fb:18:1b:50:fb:30:3d:91:
7a:99:8a:6b:fa:6a:ce:aa:da:89:22:90:0c:73:3f:75:43:6d:
ea:7d:a6:0f:3f:75:1f:2f:46:27:05:db:de:a2:2d:35:cf:a5:
1a:62:09:92:7f:af:62:50:5c:21:a5:b3:86:ea:94:96:59:2d:
7a:88:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:48 2025 by rpki-client