Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: MREoqRvQbxdZbudqAeUWzbPc4+kzYwgo7khxUUtEeOI=
Subject key identifier: 3F:74:FF:F2:D7:30:CA:00:D5:18:62:F2:68:E3:E7:47:45:E3:CA:C2
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 0198D5BC2525C31E4965454B02179362B084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 13D8
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: CeyGA4Q32tg2zQ7WFK/QdWNRTzCYknwcwlxslHrUEtY=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:25:25:c3:1e:49:65:45:4b:02:17:93:62:b0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=3f74fff2d730ca00d51862f268e3e74745e3cac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:4b:2b:d8:aa:67:fc:c9:35:22:bb:a4:b4:
90:72:ed:78:8a:c5:c6:a2:36:d0:78:7e:a9:43:f7:
b0:ae:0a:a6:f8:73:6c:63:12:5e:f9:f8:27:79:fb:
13:6a:72:7a:10:58:38:96:c4:b9:b4:99:9a:82:4e:
63:60:a0:7d:20:e0:29:3a:e7:93:71:89:db:b7:a5:
55:a2:ad:10:d3:0a:9f:4d:47:b7:f3:8c:7b:79:b2:
7d:d1:e9:7b:ec:4e:67:32:de:66:aa:0b:35:81:ac:
40:3c:6d:09:74:52:a4:3a:e9:54:a6:ea:dd:c8:a4:
8f:31:28:77:ee:43:4e:51:44:32:dc:dc:da:dc:f6:
63:a3:8d:10:ce:8c:80:8f:98:35:35:34:e7:1a:cb:
e8:a8:3a:47:99:78:e1:c2:a7:1d:84:02:f9:98:92:
93:27:38:bb:0e:f2:df:4d:a9:43:c6:e3:62:4f:aa:
e4:cf:33:6a:03:84:44:7c:ad:29:67:d6:3c:c2:d5:
b9:84:5c:e4:a4:14:0d:c8:ca:2c:40:bf:19:16:e5:
c8:81:41:cc:f3:bc:fb:fd:c2:03:ed:57:e5:f8:1f:
e0:fc:63:e7:03:b7:5c:a1:bb:c7:49:ae:05:28:ac:
1d:7a:71:81:f9:de:00:64:d5:32:82:74:7a:be:82:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:74:FF:F2:D7:30:CA:00:D5:18:62:F2:68:E3:E7:47:45:E3:CA:C2
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:85:c6:84:89:5b:2f:a1:bb:e0:78:c1:3e:3d:00:41:fd:
eb:9c:dd:cd:67:2a:24:79:08:fd:34:0f:d8:79:ea:00:0b:02:
f1:e3:be:04:1c:e3:bf:d7:44:82:bd:93:c2:9c:23:77:85:7b:
6a:55:fe:06:fa:ff:87:45:4e:d9:82:d9:bf:10:16:f9:55:14:
2d:39:cc:58:2c:ba:84:5d:1c:6d:b9:d8:90:63:78:ab:e9:a9:
19:b8:bb:ce:cf:ff:e9:42:58:3f:b6:9e:ee:02:05:ef:c5:8e:
5e:3f:c4:d2:05:c1:05:fd:56:86:36:79:d0:0a:4f:a7:07:69:
7a:d2:f7:c3:0c:89:83:36:53:a5:25:6e:b2:40:03:f5:79:d2:
10:a0:b2:00:81:d4:1c:b9:58:43:01:30:ed:d4:91:27:f3:a8:
17:d2:d8:99:aa:a6:9a:6e:4c:bb:8a:89:fb:d8:e2:51:12:e7:
00:ec:aa:97:3e:fc:0b:44:6d:e4:47:b0:98:a5:1f:1f:14:bf:
10:e4:bf:f0:3b:b5:55:19:35:a2:11:c0:a4:06:4a:17:c3:6c:
2e:3f:69:66:24:7c:a2:89:ea:e5:24:f4:b0:a7:30:00:ef:fc:
84:2a:26:9d:d4:7d:66:22:63:6e:60:37:69:dc:76:33:be:42:
ac:bb:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:23 2025 by rpki-client