Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: 5Q+Rrw7dnoRaI5l2McPIDkfVfPBgfoI0/XdcdHqliXE=
Subject key identifier: F9:A4:8B:4E:85:B5:95:CA:E3:CA:D3:E7:D3:7F:59:04:3F:9D:26:DB
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0198D54E10C64EA5131CA04FBB63D889248D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 12E6
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: xm8K08MUX/qv13dcKj+fAdIVwyheMkIJ0KGcM/5WV+g=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:10:c6:4e:a5:13:1c:a0:4f:bb:63:d8:89:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=f9a48b4e85b595cae3cad3e7d37f59043f9d26db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:fb:06:d1:4c:7e:98:a1:90:00:3d:07:84:
d8:6a:5c:b7:2a:c4:4b:96:02:fe:90:17:54:03:09:
ca:a4:4e:2b:9b:d2:e8:ac:d9:cf:0f:5b:9b:b1:9f:
bd:22:d0:4f:63:e0:4b:36:cb:b7:01:98:62:1c:1b:
ca:e2:85:e9:3b:08:6c:86:24:26:93:51:15:13:00:
ef:ef:c4:2c:a1:6d:20:88:b3:0c:df:28:d0:e9:d4:
1e:da:f1:df:e7:7c:28:ef:54:a4:db:36:5d:d3:eb:
59:a7:04:17:2b:2e:5d:57:a5:4f:85:a1:58:fb:4f:
1f:36:8a:97:40:1f:eb:65:52:36:93:58:8d:0d:8f:
fa:e9:bf:e9:9a:91:27:4a:46:f8:9c:a4:f7:a4:fe:
c6:f5:6f:c1:89:41:4e:82:0f:c0:ad:8e:1a:dc:f7:
cb:c3:5e:03:cf:4c:62:9f:9f:85:a8:28:c4:ef:d9:
74:ca:f8:e3:6e:d0:56:2b:62:67:d2:2e:a2:80:52:
5c:6d:d0:9d:64:7d:05:d6:e3:05:5e:eb:3f:a9:12:
f9:73:2d:7d:23:18:4d:30:66:17:2e:eb:63:97:eb:
84:20:d1:7d:f5:ab:93:10:43:0d:20:61:e4:f7:2b:
5d:23:1c:f6:5e:05:82:39:97:eb:21:59:41:92:90:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:8B:4E:85:B5:95:CA:E3:CA:D3:E7:D3:7F:59:04:3F:9D:26:DB
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:ac:29:c3:04:16:12:56:7d:00:24:b0:2b:6f:12:83:c8:
03:15:9b:5d:9e:e0:bb:87:ad:37:cd:14:59:77:de:42:b7:fb:
0b:d5:76:d8:45:a7:de:4d:e9:0e:54:9e:72:2b:dd:93:77:fc:
38:96:78:7e:0d:d0:00:08:9d:b2:24:c3:cf:db:42:62:c3:ad:
d0:86:8a:16:2d:e8:51:c3:64:ad:9f:2b:bd:70:20:d3:3f:70:
89:d9:1f:81:fd:f0:3d:c6:80:66:03:bb:c7:65:bb:a9:9f:a8:
a7:30:c0:4c:57:77:9c:a8:d3:6b:65:bf:b3:fe:89:75:9e:ef:
be:03:ce:09:ca:39:f5:b4:4c:8f:0a:25:44:c0:c1:91:fa:2e:
c0:8e:6d:27:73:f3:81:b9:f3:d7:c6:cb:eb:f7:1a:0a:83:12:
cf:82:5e:8e:f2:cd:4e:b4:ca:44:cd:0c:bd:a7:ec:54:85:b4:
78:de:f8:ee:c4:5c:02:28:f6:d4:d8:79:b1:47:65:3b:ee:d0:
e4:4c:1d:fa:c1:60:3d:58:1a:1c:f8:18:46:82:57:dd:79:4e:
bf:72:db:de:84:90:e9:36:0a:fb:80:60:f9:30:96:e5:85:a7:
65:e3:82:02:ef:47:df:12:3f:ee:78:c3:e5:ec:29:55:d6:34:
32:91:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:18 2025 by rpki-client