Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: EQ52vRz1dtk4O/B4OmMQT9D9PKOHRCXePoyw3Q5h/74=
Subject key identifier: 82:20:2B:A8:F6:8F:B3:28:A5:B8:87:2D:CE:D9:ED:56:18:0F:0F:AB
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 0198D47259F45FA64A5DE0F1C98E2588C33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: h86BDitcoOO+eQMRSxsjEOVJFjWCVW8dQNpqKyTO4Vo=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:59:f4:5f:a6:4a:5d:e0:f1:c9:8e:25:88:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=82202ba8f68fb328a5b8872dced9ed56180f0fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:40:7d:25:15:af:82:dd:47:24:07:a4:cb:
f2:6e:39:3b:d3:de:e9:f1:5f:24:04:63:1d:65:35:
0d:e3:60:13:37:16:60:33:1b:2c:54:80:23:50:e4:
0d:fd:7f:14:4c:14:18:bd:7a:e8:c5:72:25:16:61:
99:5a:2b:fb:ec:77:cf:c3:a1:fd:51:ac:e6:97:9e:
d4:22:09:6e:ce:87:96:8d:54:53:ed:e0:f5:01:b1:
4b:03:11:a9:df:6e:4e:f6:a4:4e:c0:4e:90:04:35:
2e:43:98:d5:9b:58:39:32:1f:cc:fb:b3:41:26:3b:
a6:a0:4c:7d:ad:34:9e:3f:b7:42:02:76:4b:21:aa:
d4:1f:39:27:3a:c5:7f:e1:60:39:6c:2d:26:1c:17:
c7:9e:01:7e:93:9e:33:d6:2a:05:b2:03:f1:86:f6:
ec:09:6a:fe:88:b1:b3:7e:c0:60:a1:63:55:ea:ae:
b8:78:a1:d7:25:1f:59:9e:d6:15:b6:e0:e0:3b:cf:
39:bd:1a:d8:26:3a:6f:b6:12:1e:da:07:61:a5:9d:
9e:5a:db:1e:ac:34:ed:cf:3d:d0:dd:2a:ea:46:3e:
0a:59:89:ba:a3:f7:5f:c4:69:5c:7d:43:6e:5f:05:
98:2c:3b:1a:1d:df:07:e8:cb:33:99:fc:7c:34:b1:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:2B:A8:F6:8F:B3:28:A5:B8:87:2D:CE:D9:ED:56:18:0F:0F:AB
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:6e:19:7c:ee:7d:88:bf:67:a6:65:5f:1c:c4:52:3b:39:
3f:4e:78:0a:1d:0b:e7:4b:59:e5:ea:e4:21:c8:c9:9f:77:a9:
f4:0a:46:ac:35:41:13:ab:f3:51:2d:23:0c:71:e5:d0:1a:a3:
bb:df:50:1e:85:28:09:21:7f:bb:65:08:65:8b:a4:85:f1:23:
b4:5c:3b:7b:1c:19:39:02:88:0d:99:77:c6:d2:34:54:21:f8:
50:0c:62:9d:06:bd:d6:11:89:5c:e1:36:97:e2:cd:fe:85:56:
3c:54:2c:28:d9:be:16:88:f1:fc:c2:36:db:5b:21:fc:5c:e6:
a1:48:16:0b:90:06:0b:77:19:bc:1b:51:66:23:38:21:0a:9c:
e7:1b:0f:20:2f:fc:0a:e6:a0:13:f6:61:8c:58:f2:91:7b:f3:
6b:b5:08:4f:53:13:1a:71:cc:1b:15:87:33:85:e3:e3:9e:cb:
38:b9:e4:e4:3f:29:e3:62:8e:d5:8f:27:e3:a0:a1:fb:97:09:
10:42:66:dc:b2:f6:0a:93:7c:f0:30:30:a1:b1:c9:f5:d1:f7:
ca:c4:f9:fe:2e:73:4f:13:05:8f:b8:be:b8:46:be:c9:47:b3:
5c:cf:6f:33:e8:1a:92:6c:63:dc:a7:f2:4c:e9:f6:c6:d0:a5:
30:8a:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:26 2025 by rpki-client