
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: gZFwDVuLLVNeoK4kk4mJFlwAZMfyU6ItAVeikLsvpS4=
Subject key identifier: CB:A1:53:AE:29:51:EB:B4:57:E5:03:0C:97:F1:6E:7C:AB:3B:A8:09
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 0198D5F1C02E76C7191D55DE7BE77825C6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 118C
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: KnrQv3QsrCYF0Zd2rghU+8P02gwI07zytWLal7dbu80=)
2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c0:2e:76:c7:19:1d:55:de:7b:e7:78:25:c6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=cba153ae2951ebb457e5030c97f16e7cab3ba809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:63:5a:4b:a8:23:9a:60:9b:45:97:36:f2:
a2:c5:b7:4e:36:03:d8:1d:11:7b:9c:d5:db:49:48:
73:58:9e:48:3e:2f:50:9b:de:80:1c:32:0b:6e:9a:
59:ce:da:74:46:37:1d:ca:ab:cd:3c:f8:60:5b:be:
c4:fe:0e:fd:53:07:26:03:32:6a:cf:a0:a3:cc:91:
80:da:c3:57:d0:e5:50:96:1b:7e:ae:b1:4f:a7:ad:
8f:12:b3:13:fd:22:f9:29:d9:84:f9:21:d5:3c:91:
d9:f3:0c:3d:2f:4f:62:66:21:d3:f5:d5:e5:48:88:
b3:1b:9d:c9:94:3f:b8:9f:17:b0:ec:65:9f:61:af:
48:7f:ca:43:4b:12:35:66:c4:af:50:2a:83:f1:f4:
b2:e8:73:23:b3:5b:88:0f:4e:91:d1:9b:49:63:c8:
22:90:fe:8e:f3:18:7e:d3:02:c3:ba:6c:48:20:d6:
3e:13:35:c5:d3:b0:60:8b:73:9a:eb:c1:96:3c:ef:
57:a2:09:ec:36:95:a0:38:30:ea:0b:32:cf:06:35:
20:40:95:7b:42:a4:7f:a5:4f:ad:d7:65:4c:88:f2:
7d:3c:59:8e:25:3d:e1:6d:a7:66:92:a5:ff:ac:46:
fd:ff:32:54:6d:54:43:1f:4b:e6:ed:22:cc:3a:cd:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:53:AE:29:51:EB:B4:57:E5:03:0C:97:F1:6E:7C:AB:3B:A8:09
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:b9:37:3b:a4:65:23:e9:ce:cc:e4:b8:59:01:e3:9b:d3:
8c:e8:16:6f:11:0f:0f:ea:57:da:98:b8:fb:ae:7f:5e:27:75:
12:e2:17:85:62:cb:88:40:79:73:3f:ed:81:5f:e6:f7:a2:06:
3d:21:bc:d9:5b:70:5f:1e:c9:41:d0:2b:92:1a:c0:cd:bf:2f:
3e:4e:2f:33:7a:46:f4:64:b0:4f:6b:dc:3a:b4:86:4e:f8:f6:
51:2c:88:98:11:82:17:df:30:73:36:bb:61:4c:28:bc:b5:36:
85:4c:bc:e6:3a:97:2b:6e:39:a2:06:b3:ea:e3:d9:7f:19:71:
76:3a:38:39:07:c6:0f:06:96:66:e8:1f:0b:1d:c6:9b:5b:0d:
f6:9b:14:35:f8:6a:b5:ff:70:c8:fc:a3:9f:24:c4:84:ea:5c:
ee:52:5b:c3:6c:a6:eb:88:bd:57:a9:8b:4e:f0:7f:c4:6e:52:
99:2b:5f:46:0e:a1:ad:35:74:7b:a7:e6:c8:3e:94:1e:b6:cf:
03:0c:f5:62:f9:24:c8:30:fc:a0:1f:6c:94:10:5f:76:e2:93:
1f:a7:a3:28:ef:ae:31:0c:f6:88:d3:92:f4:49:8b:81:58:12:
77:ef:c2:d4:ab:fb:f1:ec:f3:16:fb:51:5b:be:2c:45:55:93:
fe:2b:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:53 2025 by rpki-client