Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: EzGsryrbtz2zRi0+E4qYF8/xiqyLZZ7Ge/lff2405pU=
Subject key identifier: 10:8F:D8:90:52:D4:70:8A:E7:BB:02:4C:70:E8:31:A8:C3:2B:59:91
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0198D4743A3F25DFC75849DDE97C28094181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 1236
Signing time: Sat 23 Aug 2025 01:04:03 +0000
Manifest this update: Sat 23 Aug 2025 01:04:03 +0000
Manifest next update: Sun 24 Aug 2025 01:04:03 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: oNeY4nk4ks/KkGU4zUI1NXNTZ/mEXBB4VkmTnmsKPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:3a:3f:25:df:c7:58:49:dd:e9:7c:28:09:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Aug 23 01:04:03 2025 GMT
Not After : Aug 24 01:04:03 2025 GMT
Subject: CN=108fd89052d4708ae7bb024c70e831a8c32b5991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:1c:92:b7:d7:da:d1:30:f2:e1:77:d7:08:
60:75:9e:8b:2f:2e:b5:65:42:43:7c:cb:36:a0:6b:
4b:de:59:b3:11:9b:6f:02:85:df:9a:15:8d:87:cd:
8d:83:12:99:49:98:a4:fd:4a:8d:9c:cb:ab:39:fe:
21:f2:c8:ff:cb:c9:af:ca:6e:39:68:6a:4d:e0:9a:
5b:4d:8e:d6:14:35:c7:fc:29:b9:45:aa:ae:c6:dd:
f8:27:8a:b0:30:48:1a:0e:e7:27:5b:74:dc:e3:93:
47:a0:68:67:f5:a5:93:6f:88:f6:9a:62:8c:e2:cf:
b2:51:ba:ee:eb:8f:13:30:5f:06:78:8f:05:1e:e1:
03:41:1c:e0:52:27:0b:f1:6a:8a:cd:d0:27:69:a4:
04:6d:c3:7e:65:f8:c2:9d:0c:25:95:1f:a5:35:ae:
be:2e:7d:76:58:98:a0:91:c8:6e:bf:ea:90:0d:24:
4a:2d:4c:aa:39:25:38:eb:96:5b:f2:81:25:8e:2c:
1d:54:0e:86:a5:c1:cd:7e:1c:f8:9f:25:0a:8e:99:
95:50:fb:1d:e1:c0:4e:49:7a:04:c2:52:b7:74:e1:
81:92:44:9e:22:ad:5b:02:dc:40:b9:f8:9f:32:e7:
bd:ad:30:aa:d1:f6:4b:61:be:72:ab:b0:a2:a1:e2:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:D8:90:52:D4:70:8A:E7:BB:02:4C:70:E8:31:A8:C3:2B:59:91
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f8:7f:07:a8:f7:26:4e:3d:56:a3:cc:e7:20:7b:2a:70:7f:
10:b4:c0:f0:01:1a:99:a5:e3:dd:0f:b0:32:5c:d6:68:8f:5a:
7b:34:20:fe:53:81:3f:f8:58:fb:0a:d6:ee:21:b9:3f:1d:94:
55:ba:7a:9e:2a:c7:d1:d5:d5:94:58:ad:3f:8c:0b:c0:a6:6b:
2b:ab:1d:04:a8:d0:3e:d7:3a:dc:9a:80:95:f4:4a:bf:de:9c:
5b:55:2b:fd:dd:25:66:7d:87:e3:ca:19:00:00:29:54:ab:f4:
2f:ad:6b:8a:d4:59:ec:1a:94:44:5d:87:6c:27:8c:46:ce:a0:
b9:9b:b3:5d:4f:5f:ae:22:1b:74:26:4e:0f:b4:fe:5e:10:a6:
fe:36:19:67:d6:1e:80:13:70:b3:ff:50:fe:91:04:87:5a:47:
ee:1a:c0:02:ca:5d:a2:68:0c:f0:47:0a:e0:2e:a2:75:d6:d5:
73:ce:7c:4e:a4:91:9c:3c:64:24:62:7b:6e:f0:54:f8:12:78:
f8:a3:f1:ee:32:7e:4d:62:06:21:05:02:f7:73:6f:8e:85:ad:
c5:98:58:2a:1d:46:a8:24:c2:bd:c6:5f:36:22:0e:c5:a7:2c:
14:77:4d:4f:2c:d1:40:f8:6c:88:27:e4:3f:61:21:de:5b:f4:
f6:55:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:08 2025 by rpki-client