Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: lxiBdDxHjRnGax04aw+ehMgbdVysy7AzD3xALMEbJbk=
Subject key identifier: 50:4D:7A:9E:58:79:EE:C5:4D:5C:2F:A4:D5:07:FF:0F:98:AF:95:CB
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0198D4A83C5A5E54E57B5D48488F570AAB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 10D9
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: aLYyqZOkX7L2V4w8CntMGzSuzch9ImONrMMeiS4g33Y=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3c:5a:5e:54:e5:7b:5d:48:48:8f:57:0a:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=504d7a9e5879eec54d5c2fa4d507ff0f98af95cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:ef:fc:ac:fc:7b:ec:84:98:0b:c7:76:76:
65:8b:aa:d3:3f:be:a1:2d:6e:d9:93:fc:6f:f0:27:
75:54:13:0d:29:72:b0:49:c2:2e:4a:18:9d:ae:62:
37:c7:34:f6:8c:b0:86:eb:64:d3:19:6d:1c:c5:d9:
8f:e7:2e:a5:8f:3d:33:84:6b:b4:4d:bb:81:55:0b:
14:8e:83:6f:66:1d:0c:13:ba:69:a6:ac:ca:8b:11:
48:51:54:09:8d:a1:81:33:09:e8:5c:a3:14:65:81:
e1:ef:d2:6b:f6:00:90:9a:db:34:41:76:12:fd:39:
55:06:76:7c:12:21:60:66:70:e5:12:03:93:1e:0e:
d3:92:0a:b8:c3:be:fb:ee:fd:ee:14:f5:7d:88:3a:
6d:a5:f6:30:d5:b8:f9:cd:96:35:0c:fc:e3:d1:e9:
e2:91:b7:33:03:31:15:1a:88:15:a9:08:d5:b2:6d:
d8:8a:38:a1:1c:31:f6:af:a4:12:e7:de:d9:e7:6d:
74:c3:17:e2:44:54:53:17:16:94:c1:6c:34:1b:ef:
bf:79:2a:07:72:16:fe:5d:fa:4b:24:8e:5b:58:32:
c2:9f:15:e4:55:f8:26:cd:9b:22:cd:dd:e5:ba:cc:
0d:12:0a:9b:4c:d3:f9:6e:92:1c:74:49:be:46:a4:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:7A:9E:58:79:EE:C5:4D:5C:2F:A4:D5:07:FF:0F:98:AF:95:CB
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5b:c5:c6:f0:6b:fa:b1:fc:88:8d:57:da:10:f6:e2:7d:b0:
22:c0:99:75:b9:24:d9:e6:80:14:5b:7f:8c:fe:ed:c3:ec:ab:
fd:86:d9:41:32:11:28:bf:b0:cc:4a:1a:60:47:af:53:11:c3:
aa:54:ef:fa:45:5c:0a:c4:04:06:bc:be:9e:21:90:b2:05:aa:
54:8e:72:8c:2c:f3:37:5a:dc:2c:c1:89:36:9e:92:13:09:42:
40:21:66:43:b6:22:1f:59:e5:ad:28:cf:17:a7:ae:4e:26:05:
be:7a:5f:2a:d7:b0:e9:e8:cf:d6:57:91:b7:8e:30:4e:4f:88:
18:aa:69:a2:61:e1:1c:4f:b0:9b:4e:74:e1:12:41:49:9d:e3:
02:bc:82:26:2b:a3:ad:0c:af:e1:b8:5c:69:52:ce:1b:5d:38:
3d:d9:e7:ec:a0:d0:4c:68:9c:80:b0:da:59:84:cd:3b:a1:99:
90:bb:91:1f:b4:34:2b:e2:87:ec:0d:2f:2c:fa:3d:0b:76:4c:
f7:03:b5:39:12:d4:56:20:22:4c:45:09:b8:b7:b8:2b:80:b2:
79:0d:da:8a:d8:25:9a:dd:72:f1:a9:e0:27:96:8f:40:be:3b:
63:e6:f1:c7:c6:27:4a:86:25:a2:2b:93:4c:57:15:d7:c5:39:
40:26:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:17 2025 by rpki-client