Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: 7MVWLD/hnlQaWrC1SXP6fEpXG/7TaXyBq7LE64OPlnI=
Subject key identifier: 5D:32:01:A6:DA:BF:19:2E:77:BE:B7:49:BB:BC:2C:90:1F:1C:55:C7
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0198D5159D11CC4B5C75C54E806DA6C803C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1440
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: zm0i+Oalwtuy5rF6rS3uI+m34RwU7JqVqs5EiafOkN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9d:11:cc:4b:5c:75:c5:4e:80:6d:a6:c8:03:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=5d3201a6dabf192e77beb749bbbc2c901f1c55c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:86:41:95:85:3a:f4:0e:2c:24:e3:80:ad:
10:9f:45:40:d7:7d:75:ef:8d:cb:5b:1b:4a:7c:a9:
74:a2:4b:95:1d:94:c6:bd:56:f7:bc:33:c5:fa:e5:
7a:f4:44:47:91:d1:58:87:26:e1:36:9a:41:7a:68:
74:91:46:bf:06:98:70:d9:e0:5b:ca:a6:97:56:7a:
7a:35:1c:19:b6:d4:ec:0d:98:6e:75:71:cd:26:bb:
5a:58:ac:6d:0f:84:e0:8d:e3:27:4b:c8:87:c3:35:
e5:66:91:8f:0c:4d:4b:e8:aa:4c:8e:e6:82:f9:56:
46:4c:56:b4:3f:8e:e5:9f:79:80:36:48:d7:c9:b1:
03:b4:be:2f:c9:18:5e:c3:e8:37:26:85:ee:b8:2e:
dc:43:4e:c9:57:c2:1b:33:f3:f3:b0:ff:1d:1d:8d:
9f:c5:76:e9:90:c8:b5:98:e7:43:7e:83:ff:6f:d5:
6b:82:e0:a2:81:3c:de:a5:e8:7c:bd:0e:fd:61:2b:
ed:a5:57:77:bc:8e:c4:96:49:8c:7a:d3:e2:fc:f4:
e4:50:ca:c0:86:ad:16:df:89:be:e6:b4:b2:db:05:
6d:c1:48:ed:71:34:c2:51:06:97:53:65:6c:69:83:
12:19:17:dd:27:91:99:de:81:f4:d1:f7:f2:b9:5f:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:01:A6:DA:BF:19:2E:77:BE:B7:49:BB:BC:2C:90:1F:1C:55:C7
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:5c:da:bd:c6:07:49:67:8b:72:b7:ec:c9:14:78:aa:58:
1a:54:33:ff:d9:00:28:7f:a0:2b:fc:1a:0f:6f:ca:fb:43:87:
a1:d7:4b:0f:1a:9f:85:35:9b:81:dc:69:11:70:28:a3:f0:70:
d8:67:bc:c1:c8:4f:cd:77:48:82:f2:c3:d4:a9:54:c7:ab:8e:
43:e2:6f:91:d6:35:c0:04:50:2b:70:13:25:6c:7c:de:10:4b:
03:65:42:c8:89:15:ee:13:16:d1:1d:fa:2b:50:60:df:01:8b:
4e:f1:6c:ae:6a:bd:c3:f3:0f:67:93:38:0d:74:03:9a:35:cc:
36:62:50:a2:9a:ba:23:45:d4:d0:04:1e:22:ce:b2:18:63:e9:
ab:8a:dd:2a:47:9c:8a:b4:37:23:d5:29:00:96:7e:d0:57:1d:
26:fb:93:0c:f9:11:62:11:b1:4a:16:77:15:3c:d5:46:ee:9f:
8d:ee:70:76:f7:d2:a4:43:2f:83:fa:d2:23:f1:b5:62:18:83:
1e:93:89:07:46:4f:24:e4:06:9d:e1:d4:17:b8:a5:1a:cf:84:
f6:68:66:61:34:e2:0d:1c:b1:a4:ec:14:12:0b:34:63:bd:61:
a1:3c:c2:22:1c:7a:18:f6:b8:b1:72:93:a3:1c:f4:32:ba:b2:
4a:43:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:52 2025 by rpki-client