Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: mm7irl8BGErtnmfapbWz5lUTfzsJXF5yQqVOxNkz7zA=
Subject key identifier: 92:F0:A2:D4:09:66:31:0F:6C:1C:50:7F:7C:88:76:67:C5:AC:FB:29
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0198D6608FB01CA8F1D92F407C00237B7D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 021B
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: lFOCfeiUZ09lbUhnbRTmEphvVFvHlf2TC7Q6Lcf5uDU=)
2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8f:b0:1c:a8:f1:d9:2f:40:7c:00:23:7b:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=92f0a2d40966310f6c1c507f7c887667c5acfb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:1a:bc:ca:d4:ea:f5:65:e5:74:1e:e2:ba:
ad:52:09:6d:59:c1:10:0e:d8:6f:4e:3f:46:43:75:
96:c8:38:d1:92:e0:7b:72:75:2c:06:a2:51:05:da:
e5:d4:69:53:62:05:78:ca:8f:85:26:a5:e5:f4:32:
90:f1:50:d2:9d:f3:79:18:d3:4e:cc:84:96:9f:58:
9a:9a:69:b9:4a:a4:1c:d5:7e:79:3d:64:11:5d:07:
0a:71:08:6f:8b:2d:39:8f:ba:7d:bd:dc:85:41:d7:
79:11:48:73:ae:1c:f6:30:06:b0:01:ce:55:2a:b7:
46:a6:a5:87:92:13:d1:19:47:77:39:f4:8a:8b:ac:
3a:40:b0:60:04:a5:a6:fa:10:ef:e7:7a:e5:4d:7c:
45:e5:b1:1d:20:78:d5:67:52:df:ea:63:49:73:0c:
6d:d8:29:a0:7c:ee:8b:76:83:23:02:5e:f8:14:50:
4c:27:1b:b7:6b:3e:af:3a:39:dd:25:4f:ea:48:1e:
c8:48:3b:63:b0:d6:fa:00:d9:df:f5:fa:d6:7a:80:
82:12:35:7d:e3:a2:c0:4e:99:42:92:97:ef:79:be:
88:09:05:69:da:ad:73:ae:f5:33:ff:3f:74:a7:c2:
5a:6d:06:11:c2:a7:20:a6:d7:4a:8b:cb:31:d5:cd:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:A2:D4:09:66:31:0F:6C:1C:50:7F:7C:88:76:67:C5:AC:FB:29
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2e:4f:ea:e1:25:82:b7:01:f1:ca:56:dc:6f:33:73:c8:9b:
63:50:be:bb:b3:7a:92:f1:59:30:04:47:cf:20:80:6e:7e:10:
91:9a:a1:c2:8e:59:f5:07:ca:2c:c3:86:68:e8:54:5d:6f:ab:
47:d6:2f:f1:6d:48:e6:3a:5f:66:f2:27:3d:d2:7e:7e:fb:3f:
20:96:0f:22:bb:cb:79:3a:2f:35:6b:81:f7:d0:7d:e3:41:4c:
fd:c3:e1:a5:04:82:82:9a:96:a8:51:02:55:52:70:48:60:47:
2a:23:69:93:76:73:b8:6a:eb:85:2e:a0:fe:eb:27:0e:74:7d:
b9:fc:66:c7:bb:30:d9:21:91:0d:8f:3d:aa:7e:ad:3f:3f:fc:
a7:b6:f3:39:72:2d:46:80:95:4c:ed:92:dc:df:ce:f2:8d:c5:
c0:86:c6:98:c9:51:70:b7:3d:48:ca:42:59:26:f9:3a:3c:b4:
8a:4b:f5:d5:9d:ae:a6:7f:88:2b:04:91:27:c8:40:68:86:79:
c7:2c:89:6f:29:c0:68:e6:1f:f1:23:0f:7b:dd:5d:8e:2e:31:
3f:02:90:2d:7a:2c:6b:0b:15:d8:f6:47:46:4f:3c:8d:f9:c7:
89:04:46:a1:36:b5:e0:fa:00:0c:04:3a:93:3f:6b:34:6c:f3:
7e:ad:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:08 2025 by rpki-client