Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: aGzAN0BAYJZltx7hYEiRezOu72RrjTOwLEqfpAvnWZU=
Subject key identifier: 68:98:04:31:87:7A:C8:DA:DE:77:5E:44:25:C8:F3:8E:A3:D4:19:B0
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0198D660A412307804CE165730073B8A803F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 03FE
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: T0iCGPcmQC4Z1uwvpWhcZX0cEDYt3NcY29sGFqiKmsw=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a4:12:30:78:04:ce:16:57:30:07:3b:8a:80:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=68980431877ac8dade775e4425c8f38ea3d419b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:a9:cb:59:5e:16:9e:cc:be:62:c8:68:d3:
f2:8a:a8:87:9f:7e:d3:0d:c4:18:31:9f:c9:e8:a1:
b3:ae:f9:ba:91:36:1b:12:82:b3:0e:f1:e7:ae:ed:
65:e4:f3:f6:83:73:60:bf:a0:8e:56:d4:5c:bf:2a:
65:3f:c4:07:aa:0d:df:4e:da:f7:7e:b6:dd:6e:f3:
c4:04:10:b2:45:a0:cf:6e:f8:f0:b6:5a:21:ff:9d:
17:53:db:68:35:d2:0a:13:2f:a7:cb:b0:0c:43:3d:
20:1c:44:f0:1e:ab:02:ab:27:69:e3:a1:70:0d:b2:
23:c6:a3:cb:bd:d2:7e:c3:ab:f1:5f:e8:b5:bd:1a:
d8:4c:37:32:2d:8e:31:47:91:1e:f0:fb:9b:8d:ec:
84:29:5c:83:3f:ae:97:6a:6d:56:5d:ca:f2:94:c9:
a4:17:ad:17:10:83:71:22:58:f4:a9:1d:c6:7f:35:
2c:a9:97:d3:74:b8:48:f0:4f:13:f1:bc:fb:33:7f:
c2:c2:18:30:9d:1e:7b:18:7e:44:54:5f:c4:22:f9:
58:46:f9:d0:63:bf:89:db:77:f8:fd:d6:f2:1e:9f:
21:8d:56:94:be:6f:8a:6b:69:e7:0b:a1:5e:84:cb:
e0:ac:46:4c:e1:37:8b:e7:ca:a2:1a:57:56:26:ac:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:04:31:87:7A:C8:DA:DE:77:5E:44:25:C8:F3:8E:A3:D4:19:B0
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:0d:85:d9:fb:cb:d5:13:13:b5:bd:2c:ff:3a:4a:3d:4a:
9a:a3:7b:ee:38:17:bc:32:d5:76:0d:9d:13:10:81:3b:b0:ae:
35:88:05:2d:9a:4e:5e:af:80:b7:60:ee:20:95:84:3c:18:11:
b1:e1:a9:42:44:62:f7:53:81:31:eb:39:c8:f6:4e:f8:7f:44:
80:51:a3:61:2a:14:e7:9d:a6:c5:d8:f5:53:2b:83:1f:31:46:
ec:00:02:ab:92:28:4c:02:76:16:a8:50:d6:45:ce:79:f1:8c:
b3:1f:24:c6:0f:2a:37:14:43:33:b6:60:0d:60:41:11:3e:f0:
5c:d9:d6:29:ee:fd:7b:60:c8:8c:26:27:70:75:e2:d9:37:d8:
4c:11:31:5f:7a:b7:8d:6b:49:97:39:75:27:9e:d9:2f:2c:3e:
cb:4a:6e:d0:46:ae:1e:5e:d4:d7:4c:d4:3a:9d:b2:66:1b:9a:
0a:24:dc:f8:32:56:2b:e5:d0:f0:a6:15:bd:2b:23:e7:ad:25:
63:8f:4d:08:45:31:4d:b2:a8:6b:04:a2:b8:4d:52:0a:47:29:
d4:95:71:90:c3:b1:ec:82:45:5e:ae:ac:6b:6a:50:01:b6:60:
77:12:32:86:9c:60:d4:e0:55:5d:1f:38:cf:ed:e3:1f:0d:92:
30:e7:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:37 2025 by rpki-client