Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: 7X7YCC262Iwq//IN3fQnqinPYfNWstrvrIt1ZUjRYMg=
Subject key identifier: C5:F6:F0:4A:D1:2D:EA:6D:0F:05:1A:1E:1D:D5:E0:FB:24:85:EE:A8
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 0198D54E02DC9D4C09730F64C74B4C076ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: Y2tVaV4/L8Ivy9AVkDD5YE27ALIyHukBjSepZRw8hGI=)
2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:02:dc:9d:4c:09:73:0f:64:c7:4b:4c:07:6e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=c5f6f04ad12dea6d0f051a1e1dd5e0fb2485eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:0d:e1:9b:75:d7:2d:ec:18:6a:a6:03:82:
28:f8:6b:52:99:28:98:42:21:75:a9:dd:32:2d:d9:
10:48:c9:34:23:d0:06:f2:c6:06:93:8b:ac:fe:5f:
e7:30:9e:a0:9c:70:59:51:62:64:5e:a7:9c:62:53:
1c:91:42:b5:5d:47:52:12:ef:13:a8:f5:50:ff:14:
aa:6f:55:a8:40:af:a0:7c:24:82:86:bf:52:9b:d7:
95:16:d0:31:63:50:3b:a9:a4:99:44:85:99:18:b8:
68:d1:ef:48:8f:9a:d9:6f:a5:4a:10:b5:76:7a:f0:
62:dc:68:c0:1d:a2:d1:ba:34:c2:85:ef:e8:df:61:
76:18:1f:99:03:f3:76:00:74:be:58:eb:42:49:3b:
43:f6:89:08:b4:9c:fe:12:50:2f:96:cc:ce:42:a5:
15:6f:c2:cb:ec:01:7d:8a:17:ae:58:66:f8:c6:d2:
8c:ff:aa:46:22:3d:2c:85:6d:85:af:dc:76:bb:e0:
e3:8d:bc:5b:26:d1:e7:7f:36:ec:c6:1f:96:87:e0:
92:ff:04:9a:d9:f2:65:61:73:e3:6a:6a:81:2f:ea:
f7:d2:30:2e:a1:b8:e6:dc:53:6e:e8:af:db:0d:67:
e0:a1:be:21:3a:d6:2a:4f:23:84:49:44:3d:89:f7:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:F0:4A:D1:2D:EA:6D:0F:05:1A:1E:1D:D5:E0:FB:24:85:EE:A8
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6f:c4:d5:63:20:73:41:e5:26:40:69:99:5b:2d:47:b5:1f:
e3:a6:67:25:52:aa:01:af:79:7b:20:cc:57:40:f8:6c:e0:94:
c6:27:2a:9f:f4:43:f3:ac:6a:06:96:79:b0:b0:b7:f5:6e:5a:
ce:fa:d0:22:a4:d5:ee:50:65:de:3e:fb:0a:1a:89:4e:f0:da:
15:d4:ab:72:cd:c2:e4:e2:d5:eb:6e:fb:13:f2:d1:55:dc:eb:
a9:c0:ad:bd:83:0c:40:c1:71:21:9a:5f:45:26:98:c8:8d:f3:
2f:0b:60:d3:bc:88:16:8d:d1:e0:e6:0f:4c:26:57:a1:b2:cc:
ee:0c:34:b7:2b:77:69:08:91:0d:ac:ca:6f:c9:02:57:5f:da:
7e:b4:78:15:f7:17:e9:22:84:50:57:39:03:de:2a:b6:db:ab:
4d:01:5a:de:5c:08:93:49:53:4b:5b:72:04:13:fb:2f:3e:8a:
d3:be:98:0d:e4:60:7a:78:bb:3f:a0:d2:5e:9d:54:7a:3a:41:
20:67:e3:35:5a:78:d3:6f:ed:71:9d:d8:52:9f:02:ba:eb:71:
4f:76:6b:49:98:5e:9d:33:74:c1:fe:f5:19:b8:b2:dc:92:24:
24:94:2b:01:3f:f1:aa:e5:28:cd:8b:ab:85:08:64:39:ec:ca:
43:3f:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:48 2025 by rpki-client