Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: hc+/NPZXmoPxXhSP2FPmz92BC9+eXun6CleFJeRkT50=
Subject key identifier: D1:5A:31:19:68:C9:7A:D3:FA:70:BF:A7:76:C0:FC:9B:6C:D9:D2:8C
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 0198D515776D649A614B92AA8329ACE28096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0D08
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: AMCtAeqFUqMSJ5bd0kzexBFiJLw3ZOUQr1FSfA6eE5k=)
2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:77:6d:64:9a:61:4b:92:aa:83:29:ac:e2:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=d15a311968c97ad3fa70bfa776c0fc9b6cd9d28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:33:26:fa:39:fc:66:f1:c5:69:25:17:a5:
45:80:77:76:e4:2c:45:ae:5e:47:77:02:5e:45:53:
24:f9:dd:56:f1:69:0c:83:b9:69:ef:70:10:fa:4e:
6e:34:88:be:81:3e:f5:ef:ee:84:05:00:82:2c:9a:
a1:30:dd:55:e9:c8:f1:09:7b:9b:8a:c0:ec:09:3a:
24:18:33:02:0c:c5:eb:78:2f:b5:a4:90:35:c7:a6:
1b:88:31:54:10:6e:93:78:90:36:d7:ad:e2:e7:00:
57:d3:01:bb:d7:1a:7b:aa:2d:2a:59:1c:8c:41:cf:
c8:9e:6d:3f:ad:ac:a1:21:76:9f:d2:e7:aa:34:2c:
12:ea:da:a8:a9:b8:44:8c:0b:89:8b:1c:d3:4b:5c:
97:22:58:37:99:a4:c8:f5:6e:a5:a8:51:94:b7:ec:
54:06:39:75:c1:9b:b7:4c:dc:57:d2:b7:12:9f:70:
70:7e:15:07:3b:42:9f:a5:28:84:6e:e0:63:97:19:
3d:a2:e1:9e:cf:ea:61:ff:ce:32:29:a7:4b:33:eb:
54:42:2e:aa:76:e1:05:11:85:00:70:3a:fe:5a:b6:
e8:bb:91:06:12:25:1b:44:1e:b0:8d:c5:dc:fd:cc:
6a:4a:73:49:00:b6:9a:f4:01:c7:4d:c2:06:94:02:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:31:19:68:C9:7A:D3:FA:70:BF:A7:76:C0:FC:9B:6C:D9:D2:8C
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a2:f7:b8:17:14:8b:ad:38:ab:f4:9f:fd:de:b3:67:c0:44:
a0:39:34:2d:bb:b8:ca:ab:b5:3c:18:00:98:49:dd:72:d9:40:
60:94:b7:c4:6b:75:94:b8:0b:ef:3b:d8:c9:fb:81:65:25:51:
4d:6a:1e:08:45:84:d0:c4:12:44:9a:fd:29:96:23:e4:60:12:
57:ad:b9:f5:d0:c0:01:07:73:a4:e8:ed:0c:35:41:2c:62:e9:
f2:c7:01:aa:35:b9:97:e9:32:58:09:69:de:d4:1a:ba:9a:24:
13:4b:45:02:71:9c:28:4d:5f:b6:ba:cb:dc:7f:e4:ec:ae:cb:
fb:75:df:de:4c:d8:56:46:2d:63:1b:be:0e:b5:b3:93:90:de:
a9:42:9e:58:8f:dc:15:7a:5d:c6:98:9e:bd:07:be:17:9f:f0:
3d:69:4f:54:bf:15:01:b4:f5:54:d2:ba:12:cd:db:20:31:a4:
c5:81:eb:f8:51:07:89:6e:9d:3a:1f:f0:da:84:cf:7c:44:45:
6a:9b:f7:55:e8:06:e5:7a:8c:c3:14:8e:92:71:94:87:90:ee:
c1:3d:04:69:37:13:53:88:4d:10:bf:7f:c4:aa:c3:16:b1:2e:
19:c7:95:fe:12:9e:a6:da:42:d3:d2:d3:97:2e:3d:9f:39:87:
d1:e6:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:37 2025 by rpki-client