Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: cgdGH/87d85dZPq9ZXf4Z6s8BJpQ9nI7zgP7AEBv2uY=
Subject key identifier: 58:93:D6:97:7B:C8:3A:FA:14:0C:60:3A:03:81:1D:3C:BF:E5:5E:3A
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 0198D6613F2F3C273BCBA656A553865A78B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 118A
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: aSPEtwDfsRzAs23KoNnsgfVCfRlPZ9NhiflYZ4ggBiw=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3f:2f:3c:27:3b:cb:a6:56:a5:53:86:5a:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=5893d6977bc83afa140c603a03811d3cbfe55e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:e6:cc:7c:ca:8a:75:24:10:73:9c:70:ce:
dd:8a:82:a4:29:f4:41:cd:01:10:77:c0:95:ff:aa:
41:d9:58:27:ea:24:8a:50:2b:55:04:bc:73:f5:cf:
e2:f4:0c:88:07:04:91:ab:b8:87:d3:33:27:f6:85:
02:89:c6:bf:d6:d7:6e:7a:99:af:75:20:e3:2b:24:
7f:ae:aa:8d:64:d9:e4:3c:a4:50:15:7a:b7:c1:ed:
73:a9:94:1a:98:f4:03:bc:be:f0:12:9a:cc:06:88:
75:31:fe:eb:83:98:d5:5c:49:e0:a6:5d:57:61:2a:
c3:b1:0d:61:d2:7d:b6:ec:ea:9b:18:da:c9:8c:70:
cf:0a:85:7a:a1:7f:65:b6:2c:a7:26:47:dc:c1:57:
1c:00:a9:87:e4:86:a3:b0:b7:94:ce:1e:e4:b9:b8:
b3:fd:4f:4e:9e:30:60:c2:4f:2d:41:75:72:69:ca:
d9:58:a8:ec:cc:a6:43:b5:e5:1e:bf:87:85:97:b1:
b2:28:29:3b:da:2c:a5:70:97:35:9c:ea:aa:a2:82:
13:3c:d6:fa:94:ca:b9:0f:e3:86:11:b2:36:35:00:
87:a6:7e:81:5c:c0:a3:22:77:86:cb:d4:c6:6f:0c:
11:7f:6a:7f:aa:e5:c0:9a:70:83:52:bc:6a:58:d2:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:D6:97:7B:C8:3A:FA:14:0C:60:3A:03:81:1D:3C:BF:E5:5E:3A
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:dd:21:ee:2a:ff:6f:7c:5f:ce:4b:8d:7c:2e:38:fc:7f:
08:87:5f:41:41:fb:b0:6c:ba:86:b5:0b:af:3a:19:13:d8:07:
6c:c7:8b:93:6a:22:c2:bc:f6:03:e2:11:3b:0a:c5:ea:3a:b1:
42:a9:c9:e3:31:c3:80:a4:37:8d:05:2d:91:80:3a:42:b1:76:
c4:00:ff:69:97:7e:54:c8:ce:af:a9:0b:ee:2d:1c:64:4d:16:
19:a6:87:7f:c0:52:ca:de:b8:08:bb:8b:11:fb:67:00:85:9a:
1e:93:c8:1f:25:b5:d9:03:f6:d9:ea:94:66:8a:7b:3a:7c:bd:
68:7b:dc:ec:38:0b:a6:14:72:51:db:f0:be:5a:cf:43:5b:1c:
57:29:b2:a7:d9:22:3a:3b:2e:67:33:48:81:f6:1e:69:57:7c:
de:df:9c:c5:4f:ac:23:87:b6:c4:da:f3:8f:04:28:50:59:3c:
b2:30:86:1e:e9:57:d7:76:18:dc:ab:e7:df:34:db:78:0e:5e:
bb:26:df:9a:8d:39:02:68:e4:b9:f1:4b:21:0a:ee:17:f1:45:
16:e4:59:17:7b:de:99:24:d1:75:57:31:a5:86:9d:64:42:ca:
8b:3c:1c:87:1d:ec:5d:c4:8b:75:5e:f2:09:42:71:ca:9e:b1:
72:2d:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:24 2025 by rpki-client