Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: WkkO97FHNWglBPROV20dC27Foa5Y66p4XmZkc02fzzM=
Subject key identifier: 17:FB:ED:88:9B:FF:57:15:DF:6A:31:CC:52:7A:B5:B8:F1:CF:C5:61
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 0198D5F19929C1A58F7CB110D073CBA5077D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 11A5
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 505QcayJo-pBwK1VqJNaBX1Q-5M.roa (hash: fIMbj/fl7aaDNKfopMcxB8cXpCnGq59ztvvwuTU/2xA=)
2: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: hdR5ikt8XCL1uxNF4Ro2w1hzAZdCUrfbIRV5ot+Mvnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:99:29:c1:a5:8f:7c:b1:10:d0:73:cb:a5:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=17fbed889bff5715df6a31cc527ab5b8f1cfc561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:c7:27:58:db:70:3c:a5:40:25:20:cf:dd:
58:3d:9b:bd:a2:9a:86:1c:68:33:bc:66:c6:2f:d6:
8d:fc:cd:e9:55:73:73:92:fc:3a:4b:cd:bd:b8:ed:
5a:ae:10:e4:da:05:73:b6:4c:15:4d:1d:bc:4d:04:
87:93:49:d8:8d:59:27:69:66:5f:63:da:26:ba:e7:
51:f4:e8:70:61:6a:00:b6:3f:e5:97:da:2d:21:7c:
45:1d:a9:d8:16:ac:59:12:68:e7:35:2c:4f:e2:95:
52:b4:bb:1a:c4:3e:49:5c:83:e0:66:f2:e3:64:ce:
ea:4f:f1:4c:e8:47:6b:b3:b2:12:1c:5a:4e:d2:29:
44:c7:aa:86:79:39:6e:fe:3d:a5:72:67:d1:e8:66:
5b:db:cc:28:59:6d:6d:f7:44:38:fa:cf:51:05:f7:
3c:5b:69:cc:3c:e4:92:62:8c:66:06:b2:d8:f6:29:
03:0f:3f:74:89:e0:01:b1:a5:1b:7f:cf:d5:c1:c1:
4c:3d:1a:dc:57:54:1f:78:63:e2:1c:9a:ea:64:9b:
0a:3d:9a:57:fa:1a:39:82:1f:19:62:9c:b4:f3:54:
a8:8e:bb:30:b9:11:27:77:09:29:73:f5:32:30:98:
ee:58:a0:c4:e0:3f:10:bd:9a:5f:e1:72:9b:78:35:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:ED:88:9B:FF:57:15:DF:6A:31:CC:52:7A:B5:B8:F1:CF:C5:61
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:0f:92:84:ec:dd:ff:da:68:ac:d5:30:7b:20:3b:6b:4e:
1f:52:91:1e:42:bd:80:29:0c:8c:87:ca:65:dc:fa:4c:67:88:
03:8d:bb:57:3a:34:21:c5:f1:db:6f:37:0d:0d:84:3d:d2:92:
e9:2b:26:5b:e1:13:e3:86:89:7e:d6:97:0b:95:85:d2:1d:47:
12:5e:e5:e8:3d:18:50:70:6d:b7:33:bd:9a:93:2e:0a:41:99:
bc:39:99:5a:8b:91:5c:cb:9e:b2:21:99:ab:65:a2:7d:ce:72:
75:a6:91:21:13:7e:0e:77:a2:3e:f1:dd:41:ee:d6:ef:3d:4d:
cf:45:f9:fc:7d:fb:2e:20:08:cb:13:ea:be:95:91:79:6e:96:
59:a3:5a:02:fc:5e:24:75:c6:0d:0f:b3:93:47:83:9c:e9:6d:
53:b5:5d:5a:b8:e0:88:3a:20:b5:34:58:57:d2:2f:f5:91:8f:
56:f6:34:09:3f:5c:c6:31:51:65:a1:1d:13:d4:4e:a6:a2:06:
c2:7d:64:d1:75:4f:7a:f8:59:35:2c:31:33:77:16:e3:94:8b:
7a:d8:f4:29:be:d7:60:ca:51:cf:a7:85:52:ae:96:16:cc:a3:
6f:bc:10:a1:63:29:c8:a7:81:2c:28:33:fe:21:7f:b0:32:70:
3b:9e:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:23 2025 by rpki-client