Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier: +HPwqHvKgBwfti5NSMlDrtP2VC/izUpMh3/It7lAin8=
Subject key identifier: D3:FC:DD:80:3B:8C:9D:15:DC:3F:8B:48:37:BE:2A:D8:35:8A:52:D7
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0198D65FB339B3FB7AC9F74FD426C5BDE63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number: 0A76
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: maSsaM7UwiVw74yiGnMFOpj/Rm1Lnurzh8yuCQQGmck=)
2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b3:39:b3:fb:7a:c9:f7:4f:d4:26:c5:bd:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=d3fcdd803b8c9d15dc3f8b4837be2ad8358a52d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:47:73:a1:8a:57:de:41:aa:f5:ca:94:db:
26:f8:1b:3b:bf:4b:a7:73:99:41:76:90:a7:32:33:
0c:cc:b3:6f:35:87:42:ec:d5:5d:b3:ec:07:04:54:
7b:ec:7b:73:0d:20:0f:00:ed:d1:2a:7b:3f:2f:45:
24:1b:12:d1:e5:bc:9e:16:20:ee:48:5c:3a:27:f9:
de:ce:de:45:0c:57:09:ba:dc:82:43:f1:de:bc:7d:
50:3f:9b:30:d0:16:37:ad:e2:7d:fb:c4:47:17:90:
7e:34:51:f2:28:b6:c0:64:36:b5:49:92:e4:d5:3b:
bf:cc:db:f1:43:a3:3f:18:21:dc:13:49:77:fe:4a:
54:88:2f:30:a2:3a:a4:33:a8:8a:e5:cd:47:ab:9b:
3b:f7:26:d6:ef:ea:5b:5c:be:cc:7d:4f:1a:7e:60:
60:6e:6c:51:e2:3f:7f:27:5a:47:59:33:a0:2e:f3:
13:ea:66:7a:4c:34:ec:a5:03:6f:d3:63:d6:0b:45:
ec:e4:0f:39:67:2f:1d:31:85:79:e5:f1:ab:9e:df:
8c:bb:7c:d9:7b:c2:7d:2a:05:bd:37:d4:2a:39:76:
d3:53:3e:b6:58:10:54:52:86:6e:35:da:b9:c8:89:
e6:c3:5e:39:d3:ea:69:51:8e:69:fe:70:3b:29:57:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:DD:80:3B:8C:9D:15:DC:3F:8B:48:37:BE:2A:D8:35:8A:52:D7
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:02:4a:af:b1:d3:9d:a8:ce:50:40:4c:3c:eb:9b:61:d3:
6c:1b:d5:d7:04:c5:ef:8e:4b:eb:ae:3a:ee:b2:6c:d8:c2:b9:
5c:35:5e:fb:40:79:f6:ab:cc:66:12:6c:10:84:8c:a6:23:41:
4f:c2:b6:ce:a5:f0:39:f0:24:a2:7a:14:7f:af:bc:ea:bf:9a:
9d:2f:db:d6:e0:7e:0f:eb:65:32:bc:31:a7:97:14:b4:6c:66:
cf:72:e5:a9:c7:c6:47:21:fb:ea:0f:07:bc:74:a6:bf:f6:be:
17:7a:97:c6:bd:0a:2d:40:37:34:8d:c2:8c:e8:c4:b4:8e:b9:
28:78:e3:5d:e8:8a:ab:1a:bb:3f:29:62:54:18:48:29:9c:fd:
31:82:04:92:bd:cf:1b:d4:8d:fd:ae:8d:90:e2:9d:64:d3:4d:
40:e8:95:57:b2:0d:aa:96:fa:d5:de:b3:7c:d7:ed:ca:dc:0b:
e1:d9:69:0c:43:45:bc:ed:0f:6a:08:bd:c7:51:37:ec:9f:3c:
62:c2:70:96:52:b6:e7:01:6b:fd:18:26:21:df:92:fb:9a:0b:
9a:09:be:71:e6:10:6b:17:86:82:79:cc:c9:40:87:9e:d8:60:
89:70:59:ab:51:89:75:e6:c7:12:b1:c0:3c:d0:ff:b3:cd:27:
b3:af:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:12 2025 by rpki-client