Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: MHK9yFaEytMh+JHiY+oXQHfWfkBY5PMcmWEdFZkii/E=
Subject key identifier: 97:DB:D0:C1:74:98:8C:A2:04:69:ED:26:7E:A1:72:95:75:FD:93:1E
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0198D516272BFB6409AFA814E19256DBECC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0A36
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 43EFRdQHOC1YSLbzB0sNpJn7rS/NBpQG7PrM60l46tk=)
2: aTpXXC3KXcSwtDcwh6F3niPkHWU.roa (hash: ustcN0bW+oUtpGBdM/dRdF4t5dwpSRMOI1Anoza5nkA=)
3: mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa (hash: 9qLzR+8C4wkJn5IoUy5FHXOEqts6JcExi312TdCvl90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:27:2b:fb:64:09:af:a8:14:e1:92:56:db:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=97dbd0c174988ca20469ed267ea1729575fd931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:53:41:c2:0e:f7:b9:de:fb:14:9a:55:28:
62:40:ce:ed:8d:b0:bd:15:6b:01:09:51:4b:8a:bb:
b9:55:42:70:d5:ab:33:94:82:1b:4d:7f:1d:bb:42:
bd:53:6f:e0:2b:98:75:2f:bd:2e:85:75:c4:18:cd:
df:54:a1:7e:c4:bf:77:96:b5:c5:83:86:db:2f:24:
40:95:81:bb:33:1d:e6:f4:ad:19:db:5b:3e:d0:7d:
c6:c2:07:e8:f2:a3:59:70:91:9c:59:1f:a1:2c:87:
be:c2:18:02:ca:c9:9f:a5:1c:f9:3a:b0:72:28:48:
43:9c:99:f6:04:33:37:ec:ab:51:d2:85:39:cc:38:
25:1b:e4:70:70:07:b2:a4:d1:17:9f:d2:29:42:8d:
b7:fc:11:5d:cf:0b:6e:32:35:00:82:15:8a:a7:19:
32:ba:98:43:54:5a:05:32:81:28:d4:94:e4:6c:f0:
ba:6c:b3:43:fd:97:ba:dd:20:38:90:0d:c5:95:72:
79:71:cd:c4:4e:26:2b:1f:c0:27:b9:23:a3:2b:10:
8d:7b:b7:60:04:74:d4:9d:2c:c5:d6:7a:23:d4:5a:
a1:e7:1a:e6:7b:c7:97:7e:40:b1:7f:22:7c:d6:df:
90:b9:fd:8f:4e:43:10:34:30:b9:39:fc:85:a4:58:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:D0:C1:74:98:8C:A2:04:69:ED:26:7E:A1:72:95:75:FD:93:1E
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:67:67:70:56:31:6b:78:04:a7:af:cf:37:b7:69:d6:a7:
cf:ee:a4:12:24:b3:3a:6a:27:d4:11:35:95:23:ef:10:23:f2:
33:4c:98:ed:e5:51:89:0c:d3:ae:7d:b8:82:53:54:f2:ce:51:
88:82:35:10:7d:30:e8:2e:5f:10:4c:3d:77:99:54:a8:4b:86:
f1:2b:1f:62:95:09:6b:e5:bd:38:8d:2b:1b:9e:6f:99:49:12:
4c:46:e7:d5:b5:43:86:6c:75:c1:19:92:fb:e0:fc:f4:e0:f4:
6c:65:e4:b6:14:f1:5e:f0:24:69:53:a5:6d:cf:fd:27:7f:4c:
be:e3:82:9b:34:e1:1c:43:41:6a:9c:7f:0e:22:95:6e:b0:89:
dd:c0:4c:68:14:db:0a:f2:62:0f:fa:a0:1e:91:06:43:39:65:
c0:ab:4a:4a:8f:68:5e:5f:f3:34:67:89:d7:54:65:36:fe:c8:
47:a7:ec:25:8e:7a:ad:69:2d:87:ae:93:a7:0e:07:df:b7:67:
c2:d9:a0:56:19:e7:94:dd:7a:99:15:aa:25:f8:a8:d3:26:94:
af:b9:b6:fb:05:d7:a5:7e:0d:94:db:ee:7a:5b:c4:07:c6:bb:
c8:a0:95:6a:65:02:bb:27:f7:db:ba:b0:cb:41:a0:72:17:fa:
63:fe:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:58 2025 by rpki-client