Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: xOve6bnxUepwYNsG68gcdt9h0UwBGAGqSWfpOdhcCOk=
Subject key identifier: CD:92:BF:2C:B8:B0:C7:A4:FE:3F:34:CE:8A:36:9D:82:E3:80:20:7B
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 0198D7A92969CEB6A2A9192DBFD425FAD38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:44 +0000
Manifest this update: Sat 23 Aug 2025 16:00:44 +0000
Manifest next update: Sun 24 Aug 2025 16:00:44 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: EKvT8sziD7RlPqVp78IFnHQmDBl3+z3yKkJBG6S9I8E=)
2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:29:69:ce:b6:a2:a9:19:2d:bf:d4:25:fa:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Aug 23 16:00:44 2025 GMT
Not After : Aug 24 16:00:44 2025 GMT
Subject: CN=cd92bf2cb8b0c7a4fe3f34ce8a369d82e380207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:2e:e4:2d:4c:d6:0d:fc:b2:8f:e8:99:e4:
34:c4:00:c7:30:ef:75:b8:6c:3d:e1:0b:f7:51:21:
1a:8e:eb:84:63:13:35:75:47:79:b1:9c:94:f8:d4:
82:16:b8:08:33:e8:17:0a:18:d6:66:31:dc:f8:70:
99:db:55:24:d5:8a:0a:bb:ed:86:74:03:e9:01:7a:
25:d5:ac:e2:dc:e6:f7:c8:d5:2f:56:95:29:21:1a:
9c:4b:82:44:cb:16:01:41:19:f8:a1:b3:fe:db:9e:
de:23:65:30:0f:00:ee:a5:7e:22:c7:95:a9:9b:a8:
ff:59:61:53:89:74:9e:11:a6:1b:69:56:e9:84:79:
3d:8d:07:70:1a:ed:cd:c2:a9:52:cf:07:d6:6b:3c:
7c:28:9a:e7:bd:12:66:2b:94:45:67:e6:ac:26:13:
ab:ed:65:39:7d:00:05:68:44:51:00:57:63:c8:58:
03:86:42:7b:b6:ae:3e:3a:0a:6a:84:1b:24:97:98:
02:db:33:aa:82:7f:3a:98:e3:b1:48:2f:63:a0:7a:
fb:ff:19:9c:bf:82:ff:e7:c3:16:21:2e:b7:87:93:
10:ac:89:fb:70:2d:58:03:b4:f2:fa:6a:c0:7c:7b:
95:b7:be:47:7a:32:05:c5:e6:e8:e7:cd:dc:2d:a2:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:92:BF:2C:B8:B0:C7:A4:FE:3F:34:CE:8A:36:9D:82:E3:80:20:7B
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:a8:c1:fd:cb:19:86:7a:e5:a0:98:65:ad:6f:6a:72:d2:
2d:82:0e:42:99:e5:f3:72:da:d2:a6:42:2e:20:95:f8:b5:0d:
1c:a4:f1:04:2b:13:4c:10:d9:f5:fd:a3:02:64:99:ca:8c:07:
ea:26:6c:9b:49:20:8b:0f:2f:79:77:90:2b:f6:de:40:d1:5b:
d8:91:f1:11:e9:cf:24:85:9c:02:e8:df:dc:f7:b0:2c:c1:f5:
1c:a3:72:27:59:9b:e1:78:8d:29:24:40:1f:3d:4f:72:48:d2:
f6:e7:ab:56:20:51:0e:1e:24:6f:6a:04:a3:51:fa:bc:e8:46:
12:e8:d9:0d:1a:b6:d7:7d:71:65:7a:4e:06:f2:9b:bb:96:28:
0d:a6:23:d5:a3:d5:e8:52:40:58:46:c3:f0:3d:64:04:57:a3:
3e:72:80:61:0c:82:4c:a8:ed:bd:0d:d8:0f:c8:66:3a:17:47:
4a:3e:55:e3:45:d1:4c:df:c2:89:df:9f:b4:53:ee:3d:51:37:
3a:b4:04:ae:04:59:4d:dc:bb:80:24:9b:30:78:86:00:9a:2d:
3e:f8:d7:ab:6e:fc:b8:33:92:01:02:27:84:b7:e8:bd:99:64:
1b:65:58:bb:7a:12:2b:b8:0b:47:e8:52:7d:4b:a7:11:c2:13:
7c:e4:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:18 2025 by rpki-client