Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: UX/h2Idg4dTNvEO5EqecIljhM2inWcGxAI4gsQ74WYU=
Subject key identifier: AA:1E:6E:35:CA:26:95:C9:F9:AA:9E:09:B5:B0:C2:20:36:C0:7E:38
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 0198D5F18BC488F2A73F1DFAED61087CB79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: FqgFKMyNs2/7h+kWsjBZwV35v8HYkTFp9lguncP+2nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8b:c4:88:f2:a7:3f:1d:fa:ed:61:08:7c:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=aa1e6e35ca2695c9f9aa9e09b5b0c22036c07e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:d1:5e:42:11:24:c1:d5:6f:4d:4a:5d:93:
c1:64:2d:25:ba:d0:9e:49:7b:ad:4c:26:0c:ed:72:
7b:d4:90:fb:6b:16:a1:29:21:2f:bc:77:e9:8e:63:
5d:39:d5:25:5f:5a:ca:f4:ce:00:c2:0e:ef:80:86:
d4:c4:6d:49:bc:7b:a7:46:83:f8:7b:13:3b:72:94:
ba:37:fe:d7:b2:36:10:5b:b1:f0:b6:6c:1e:e5:73:
70:ba:bf:91:f6:52:93:c4:b6:7b:8b:63:88:2a:73:
cc:2d:0b:69:ba:93:83:2e:bf:ce:42:49:a2:21:b1:
8f:02:dc:6d:96:66:33:d6:1a:0f:8d:07:0b:42:c4:
c0:26:8a:bb:69:b1:f2:80:c9:58:24:a2:65:0d:38:
f1:61:9f:05:69:00:66:bd:8a:3c:c3:cc:e0:72:e0:
9b:06:46:9a:8a:96:17:bd:61:e0:31:c5:8e:56:c0:
22:d7:b5:64:e5:7b:39:f3:be:70:97:9e:0b:0e:3a:
a3:9d:85:28:4b:a0:55:e2:b3:4e:8f:43:b3:a2:6c:
69:aa:92:32:3c:59:74:5f:46:da:7c:fe:d0:08:1b:
04:2a:d1:de:02:75:39:7e:7b:91:a1:19:2c:9f:5a:
01:da:af:80:10:d6:ce:63:cd:a6:1c:70:e1:c3:8e:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1E:6E:35:CA:26:95:C9:F9:AA:9E:09:B5:B0:C2:20:36:C0:7E:38
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:59:10:51:33:2d:9b:66:85:3c:c5:93:14:83:37:e4:1a:
f8:23:11:01:dd:ae:7a:06:6c:ab:dd:8e:04:aa:9c:f8:61:9c:
b9:98:2d:61:4e:f4:67:a0:16:7a:57:fd:1f:fc:69:f0:fb:e1:
f0:f5:58:fb:81:7c:a3:09:4e:06:a0:e2:c3:a0:52:28:c1:96:
7c:23:f8:65:c6:95:e4:37:25:1b:ad:40:44:e3:03:ba:5a:c6:
5a:ae:7f:02:05:d6:38:65:e8:58:04:86:f2:9f:ff:3f:73:6e:
7e:54:3f:44:41:f3:79:28:22:bd:5c:61:81:b3:03:84:d8:b8:
8f:81:9c:d5:e6:f7:9a:68:23:89:d3:36:ab:d9:2a:3e:80:58:
97:62:93:85:ed:98:4a:50:fe:a5:2e:7e:b9:10:6e:18:69:22:
78:ab:9d:b6:39:c4:31:b2:d5:89:4a:57:74:a9:e3:40:ce:2d:
27:56:e8:ab:00:f8:77:c5:47:09:b5:55:fb:03:8a:36:57:d3:
56:63:fa:77:f7:24:b7:d2:50:11:c7:d8:91:02:c5:7c:39:c9:
0a:32:89:fc:b3:56:58:24:c4:59:38:ea:30:63:9f:78:ab:7b:
fb:0b:ab:3d:11:5c:9c:80:19:f8:1f:9d:73:b1:62:01:df:2f:
fd:15:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:28 2025 by rpki-client