Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: BLRyYA3Kb92k933DfFmwhCiENN8w4KW9xf9WzMjntpg=
Subject key identifier: D3:DA:1F:E2:B1:49:88:B6:BE:4E:44:84:F1:FE:7E:73:99:CA:B4:3A
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 0198D54E0820F20D17248B79BD0FF26BE3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 06E8
Signing time: Sat 23 Aug 2025 05:01:57 +0000
Manifest this update: Sat 23 Aug 2025 05:01:57 +0000
Manifest next update: Sun 24 Aug 2025 05:01:57 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: V44z/tYmyh7RpYoZB8mhueRYpu5clIuhrGGFP5HR8EY=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:08:20:f2:0d:17:24:8b:79:bd:0f:f2:6b:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: Aug 23 05:01:57 2025 GMT
Not After : Aug 24 05:01:57 2025 GMT
Subject: CN=d3da1fe2b14988b6be4e4484f1fe7e7399cab43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:1d:1c:00:26:9a:56:7a:91:2b:f6:4c:00:
2a:1c:be:c4:6d:00:87:20:1e:a9:f6:1b:c1:1c:fd:
8e:b4:66:62:b8:27:49:76:f1:ad:c7:17:dc:1e:1d:
c6:16:d5:2a:a2:f9:92:49:77:68:41:67:aa:99:82:
ec:6a:d4:b7:67:ab:32:f6:87:43:69:80:2c:cc:b9:
69:0a:35:71:c5:73:7d:1a:5f:27:d4:25:bc:60:09:
88:ce:07:8d:30:57:96:2c:6e:f7:10:4b:94:92:48:
bc:3c:2b:98:ec:8e:9f:65:04:5c:92:44:12:d7:9d:
4d:a2:6a:9c:4b:64:c7:82:cb:26:0a:e3:c8:74:90:
bf:37:bd:e9:4e:3e:6e:bf:ee:a2:60:e5:18:a3:f5:
17:2f:52:dd:67:af:cb:38:da:fc:f4:de:8f:dc:1d:
cb:3a:ef:f2:ae:94:96:50:14:8c:b9:55:f5:78:34:
47:60:2e:c0:09:42:48:7e:b4:54:82:6d:11:00:8d:
c3:ff:73:23:8e:28:62:b3:3c:bf:e7:b9:de:65:bb:
10:15:42:49:35:79:88:a7:03:bd:35:c2:dd:20:f1:
33:95:c8:f1:5d:e6:bc:d3:91:00:db:47:82:67:03:
07:57:aa:80:c9:36:5b:fd:35:ce:61:84:1a:b5:8d:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:1F:E2:B1:49:88:B6:BE:4E:44:84:F1:FE:7E:73:99:CA:B4:3A
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:43:bf:89:d1:50:83:ea:38:08:f2:44:ed:55:1a:a5:3e:31:
2c:62:a1:5a:b0:b1:d4:cf:18:90:78:22:91:ff:2a:a4:89:7c:
a3:cb:b9:35:6d:73:6f:9f:d6:dd:e9:db:05:a8:16:cb:86:dc:
ea:d1:5b:36:4a:ec:f2:c4:8b:46:a4:ca:da:0e:ef:3e:35:83:
ae:ff:72:e6:73:92:69:d6:05:96:f9:18:69:eb:f0:75:c4:ad:
39:e1:f4:4d:1a:4f:16:d1:f7:d5:5c:94:3c:22:2c:2a:44:17:
0d:d8:30:49:ea:66:2d:57:a3:82:78:5c:90:55:58:cf:66:3b:
17:7c:58:59:2c:c7:27:40:38:f3:44:f0:8b:97:35:2a:d5:74:
5b:16:60:84:6e:1a:17:44:23:0e:33:d4:ae:43:4b:7a:ed:14:
58:d9:5e:ae:bb:75:8a:6e:2a:08:f4:f1:5a:30:1a:fd:82:53:
d0:c7:a3:68:0a:6b:ee:74:1d:be:88:18:9f:31:b4:99:b4:1c:
d5:4c:6f:97:ff:0a:cf:8e:36:ea:62:fd:55:21:e6:9d:75:dc:
24:2c:da:a6:16:d1:d8:67:cb:fd:d0:4f:99:22:4d:ad:24:df:
58:4e:f4:0c:41:85:eb:66:ba:2e:07:c9:95:52:45:68:b3:2b:
bb:8a:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:09 2025 by rpki-client