Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: lmCyPym6seNLu53ceCjsHTBPJGnIra0D6JLBFvGwZAE=
Subject key identifier: 64:8D:1F:32:48:E9:FE:0E:6A:14:5B:9D:80:66:50:C6:2A:4F:A9:73
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 0198D65F2E76444541C477E549A77FB93ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: dBFYjApRTKPP0FOVrEX18MSSka2e2QCV6hOsSqVvxWA=)
2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2e:76:44:45:41:c4:77:e5:49:a7:7f:b9:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=648d1f3248e9fe0e6a145b9d806650c62a4fa973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:92:98:02:47:c0:ee:a8:a5:b6:4b:64:35:
af:f2:d7:23:9f:8f:4e:7b:3c:62:85:44:da:05:d9:
98:75:04:f9:2a:c7:96:1f:d7:6f:2c:fb:46:87:d1:
d0:db:f4:da:19:95:d0:a1:99:e0:5f:f8:f2:3a:1c:
bc:f3:a6:00:31:6f:00:b3:b9:ba:e5:8c:70:6a:eb:
95:8b:15:02:cc:1a:47:97:9c:8d:c1:3b:fb:85:cb:
fd:d5:55:46:b9:ed:d0:23:52:52:2c:b1:05:38:e3:
c0:d1:7c:6d:e6:f6:5c:41:dc:d7:c2:0f:a9:2c:ae:
1b:c9:86:10:1f:86:b8:4e:23:94:a6:42:9c:26:eb:
98:58:fe:d4:d6:47:5a:e3:4f:9a:80:56:5e:a6:4b:
4f:c6:fc:37:d3:ac:8b:27:fa:ce:a8:5f:e7:06:6e:
0a:8f:9a:67:df:56:7f:41:8a:0f:59:46:e4:42:f6:
82:67:1d:10:f8:d9:ac:94:d5:d1:5d:81:98:19:02:
6f:b6:12:ce:cc:31:80:f0:c9:22:95:b6:58:2c:99:
78:b7:31:65:20:9a:21:92:ed:b7:3c:c8:c2:8e:47:
62:ff:c2:aa:29:2d:ad:69:90:8c:4d:75:6f:cc:13:
cb:c9:cd:97:61:28:e9:7a:75:50:e8:ad:1d:ca:c1:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:1F:32:48:E9:FE:0E:6A:14:5B:9D:80:66:50:C6:2A:4F:A9:73
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:9f:da:f6:c6:30:91:ce:a4:78:08:ba:70:86:9a:4a:8b:
72:6a:88:6f:72:ce:ea:b6:5b:6b:87:8a:d8:0b:10:9e:5b:ef:
61:48:af:37:f2:46:e9:9c:7d:80:d6:af:63:1c:6e:4b:ef:35:
93:ee:52:87:a8:42:3d:5b:bd:27:e3:73:0d:b4:d5:a0:81:32:
c7:80:ba:b4:d2:9f:d5:50:66:5c:f6:57:86:4b:c7:dc:13:af:
da:51:16:20:3d:80:9d:77:05:0d:f7:3c:e9:3a:2b:05:0b:20:
43:c2:9f:55:a6:10:e3:b1:ab:70:a7:7b:df:1a:03:ec:a0:16:
72:10:48:73:6a:b5:60:1e:1e:1a:b6:4c:1f:bb:51:c7:5c:61:
19:05:b6:fe:70:8d:22:94:1f:6b:9e:a2:cb:23:39:e1:ba:e1:
e2:d1:5a:0e:28:08:aa:a7:91:4d:93:fc:72:e3:c0:4c:80:e0:
f4:15:8c:6b:f1:7e:27:9a:fe:6a:64:5b:e3:e9:54:be:4d:2e:
60:b3:97:3f:83:81:7a:4c:29:71:86:3d:30:1b:7a:84:04:63:
59:a1:33:cf:aa:b9:5b:d8:c7:df:dc:0a:ae:7e:1f:b2:9a:01:
cd:2e:f8:cc:b8:da:03:21:7b:76:a7:96:44:31:00:5e:72:ae:
27:eb:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:53 2025 by rpki-client