Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier: U6tk7pWLG3YobA1IL97FHsVhSro1+HkcdzqXCbgQ8Ho=
Subject key identifier: 7A:D3:C2:DA:2B:29:06:10:CC:1F:34:F9:68:19:38:6E:68:C9:87:C0
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial: 0198D5F119D65AAF8B02161F0706140E5C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=)
2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: i9uj1+CkEKIn20KEQWS0NjGyMsZhENZY3Gi06Sd5gBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:19:d6:5a:af:8b:02:16:1f:07:06:14:0e:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=7ad3c2da2b290610cc1f34f96819386e68c987c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:b2:ea:ec:60:54:a4:d6:0c:4c:52:b0:38:
70:1f:93:05:37:e7:a1:13:f4:13:7c:88:f7:d6:64:
21:69:f2:27:5b:4b:ed:36:a8:36:b7:28:6e:90:94:
e6:39:ab:c6:c3:a8:19:df:51:78:bd:f4:08:c3:50:
4d:78:4b:03:63:9b:99:a0:3f:10:22:63:81:38:c9:
38:f8:48:b2:22:8a:98:b2:95:c6:32:ff:be:ca:c2:
e3:ff:d4:6d:b0:3b:96:47:0d:16:94:64:63:a8:a6:
f7:75:0a:68:09:90:83:8b:a5:63:e0:64:3e:41:3b:
4c:cf:22:89:a4:5e:d7:75:5f:f9:b4:41:8c:0b:9c:
70:3f:0d:a9:3c:c5:8a:f1:a9:3a:1f:ce:81:8b:df:
c9:57:36:03:d7:0f:cb:84:fb:b6:b4:6e:dd:78:39:
ab:2d:c8:91:81:ef:d5:eb:07:6b:42:6c:13:68:9a:
0f:cd:f3:e6:80:25:58:9b:1d:13:96:f8:b1:19:87:
2a:1c:42:28:3c:9f:d0:9c:0a:7a:ac:a4:a3:79:f1:
31:2e:cc:cd:ff:f0:e2:50:8a:78:ff:8f:0d:99:a0:
ab:99:11:03:c9:12:38:9f:19:e9:40:ab:03:2d:f1:
8d:35:81:ce:a0:5c:37:51:9c:2e:21:e8:f1:03:ef:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:C2:DA:2B:29:06:10:CC:1F:34:F9:68:19:38:6E:68:C9:87:C0
X509v3 Authority Key Identifier:
keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:19:ea:02:cf:60:55:b1:05:7f:b3:cd:cb:c1:ed:87:60:
ba:db:c5:bd:ec:3b:a4:60:57:ae:e2:5c:72:fa:33:11:2b:30:
db:8d:aa:56:4d:93:a2:76:6f:e7:7b:58:81:69:12:7b:27:c3:
a6:e6:aa:08:f7:8f:4a:2e:7e:82:e8:24:f3:ac:6d:44:ea:b4:
7a:d3:db:b6:ec:44:21:e5:c7:d7:35:42:9a:7f:b4:ed:69:09:
cd:62:14:c7:8b:59:df:95:06:a9:9f:68:6e:44:61:b9:2a:aa:
ec:59:54:71:e7:8b:ea:94:53:41:f1:b0:1c:0b:79:67:5f:e1:
97:24:bd:2f:b6:9a:57:3b:32:e5:f1:09:0d:64:91:78:09:be:
93:7d:95:6d:a1:f1:69:b9:fd:81:06:48:30:7d:b9:b3:75:72:
a3:0a:f6:45:57:4f:5c:67:25:1f:15:98:ba:42:ae:40:47:4c:
9a:56:be:f2:fb:51:e2:8f:d5:89:ae:b8:5a:8f:48:e6:1c:76:
d4:b8:62:ab:5c:39:7d:1e:eb:2c:82:2e:cd:3a:6b:4c:fb:32:
98:e5:f9:7c:b8:8a:c4:ea:61:51:1f:97:b3:5b:3c:ef:6b:62:
3c:19:f7:e5:40:2d:b5:90:61:a7:38:bb:f2:a5:7f:6e:55:45:
2d:cb:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:38 2025 by rpki-client