Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: LUHMEo+4Bsnf4G2Kz+EycIm/WiBX/yEnCM9JuC5yWgo=
Subject key identifier: C5:01:BB:4B:97:D4:E6:44:2D:00:FB:59:7E:67:A5:53:AC:CE:40:03
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0198D65EF74CAD684250DBA1CF7B8C7EB574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:04 +0000
Manifest this update: Sat 23 Aug 2025 10:00:04 +0000
Manifest next update: Sun 24 Aug 2025 10:00:04 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: GCQZ9q8Ue/t9UFX1L58pi/7Jw7ggqhbKAdRyGe8Vw2U=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:f7:4c:ad:68:42:50:db:a1:cf:7b:8c:7e:b5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Aug 23 10:00:04 2025 GMT
Not After : Aug 24 10:00:04 2025 GMT
Subject: CN=c501bb4b97d4e6442d00fb597e67a553acce4003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:10:fc:bd:0c:2e:cc:62:d7:2f:74:f4:6d:
e9:bb:37:9d:8c:65:f0:33:64:f8:41:fa:8e:3a:03:
95:27:3f:a0:ce:7b:af:91:73:0a:d7:ed:6a:40:23:
2e:fe:4f:8f:ff:73:d6:20:40:7c:62:88:6c:03:1c:
8a:c2:fd:80:d1:57:77:89:28:48:9d:5f:7e:6b:91:
f0:a5:e0:49:87:cf:40:f5:0f:7a:d6:b5:e5:12:4e:
66:49:63:71:aa:c7:a9:e1:cb:b5:d6:38:a7:de:6b:
6f:d9:e6:57:35:9c:9f:35:52:e6:d3:8b:68:d2:6e:
94:c4:98:fa:c7:ed:52:ea:05:4a:66:ef:bc:4d:6b:
87:ad:71:ed:79:02:f3:d1:2e:3c:6c:9d:5f:4c:2d:
fa:42:df:37:a7:09:25:dd:e7:09:c5:86:13:03:3c:
cd:48:bb:96:5e:a3:d1:8e:ce:25:ac:46:8e:d1:4d:
88:49:bb:db:5d:b2:c1:95:fb:0e:a0:78:4f:e2:c0:
9f:60:e6:76:ec:0f:3e:0e:05:6f:9b:b7:24:29:a7:
72:4c:3e:77:37:d4:7e:9d:6c:98:13:51:d4:6a:03:
85:9a:16:32:31:95:df:1b:97:ff:2b:ad:ec:fe:44:
82:c4:aa:ac:18:93:ce:ea:53:f4:20:7c:c4:b3:03:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:BB:4B:97:D4:E6:44:2D:00:FB:59:7E:67:A5:53:AC:CE:40:03
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:c5:71:91:d7:2c:aa:70:c0:66:a7:d6:f4:54:cc:3d:d1:
38:8a:1d:09:4d:4d:b8:de:60:36:29:45:41:57:83:c5:a4:fb:
f9:7a:1d:e1:5b:b9:80:7e:a5:49:36:d1:c9:29:9b:6d:3b:b6:
b2:e0:13:49:97:cf:c7:00:c3:cd:44:b2:bf:28:4c:33:23:1d:
55:8b:a4:ab:a7:d2:a4:a1:98:a1:e2:85:73:e4:89:0d:c5:ca:
f1:3c:07:58:67:16:df:0e:c1:01:bd:70:0e:58:41:21:d5:5b:
b3:cd:2d:23:7c:6f:4a:4f:04:85:41:1c:76:8b:9b:47:0a:4d:
4b:d9:14:bb:4f:f2:84:47:45:5b:1d:0c:ab:d9:62:2d:9c:39:
3c:e7:17:e6:63:ad:6d:cf:d4:c6:32:e1:aa:af:b7:b2:b2:1b:
97:53:2e:a3:ac:b5:d1:3b:21:93:42:30:1e:ec:a7:31:9d:12:
d0:cf:19:1f:b2:98:13:76:dd:0d:19:69:49:f5:6c:bb:4b:d3:
14:8f:d7:61:6c:86:84:07:26:f3:c8:2a:c1:8c:73:a4:42:4f:
67:53:26:4f:8b:1d:68:ee:f2:42:43:d9:28:9d:1f:d9:ce:35:
8c:e6:17:d8:fb:bc:67:32:2a:92:ab:59:27:47:63:0e:4e:32:
4d:eb:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:08 2025 by rpki-client