Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: IEsdTtzIc9Z8U3OFuzHhV3+GQV2FbH7oxApHWARjslg=
Subject key identifier: E5:EC:9D:F2:87:A9:F3:6C:1E:8D:2B:3E:40:71:3A:0D:BB:37:24:A6
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0198D54E60E1EEE86A510DD9F735DDF933DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: CXnTbA5ST3UR2qlAWPqoH8lqvhHsKusaonHJptgHF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:60:e1:ee:e8:6a:51:0d:d9:f7:35:dd:f9:33:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=e5ec9df287a9f36c1e8d2b3e40713a0dbb3724a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:bd:72:bf:88:d4:1f:9c:66:da:83:a0:ee:
35:15:1a:06:62:64:3a:c8:88:6d:42:06:a6:70:65:
f0:83:fb:ae:b7:82:2e:4d:61:52:e5:14:32:0e:b8:
48:f9:1e:8a:20:9e:81:4e:57:18:f0:d9:50:61:18:
28:52:05:46:e8:8d:29:91:23:f0:c0:c0:a1:4a:87:
05:2f:08:88:cb:98:22:ed:01:c2:2f:fe:60:87:88:
b3:80:73:f0:60:eb:a7:ef:d8:e3:77:f2:fb:85:f5:
cb:c8:d5:c2:8a:84:b1:9b:2a:ee:98:a1:76:14:e6:
13:4c:ca:94:bf:db:6f:b6:89:a4:85:8e:60:94:63:
2e:76:4e:38:64:c1:99:ec:b5:38:07:e0:3e:70:1a:
27:d7:7a:1b:6a:c8:5c:69:b8:cc:49:f2:f5:57:97:
5c:67:41:e0:fa:d4:9b:42:ba:1c:dd:6d:73:70:1d:
fa:5a:fb:2e:5f:af:23:eb:65:55:45:ea:d2:ef:b5:
ed:35:b3:e3:75:fc:eb:79:35:ea:20:a1:8b:86:af:
bb:2b:6d:d9:8f:4b:76:69:6c:99:88:1d:65:63:70:
f2:47:55:8d:8f:5f:cf:1b:74:3b:5d:71:9f:86:28:
4b:1b:5e:66:6a:e9:7b:83:2e:e8:14:53:53:f2:4e:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:9D:F2:87:A9:F3:6C:1E:8D:2B:3E:40:71:3A:0D:BB:37:24:A6
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4e:e9:8b:68:7c:f8:bc:37:fc:57:e4:2d:ef:e6:ff:29:70:
0d:5a:71:e5:32:f8:cd:6d:25:c6:c2:8c:1d:a8:1c:5b:36:2b:
65:05:49:0d:df:57:d5:7c:c9:b6:7f:08:00:5c:99:b2:bb:ca:
5d:ab:21:4d:07:60:ab:47:ce:fe:d4:25:e1:4c:7c:ef:2e:2b:
28:08:0c:a7:3d:de:dc:de:61:c1:7f:1f:a5:34:d9:95:10:83:
75:54:7c:5e:0f:71:c0:39:15:f2:3a:4b:c8:fc:57:2b:17:9d:
77:b3:63:71:1b:2a:3f:cd:f5:1b:e8:b9:87:b6:7e:65:3b:ab:
86:87:40:dd:da:2e:1e:d5:92:60:f2:cb:ce:65:34:f1:24:39:
d8:d8:17:8b:41:1b:46:39:25:1f:f3:a1:ca:c0:e3:de:88:ea:
6c:74:c3:16:5b:21:62:14:63:b1:7e:93:3f:1a:fd:8d:d6:0f:
48:a7:9f:3a:a8:51:0a:88:c4:fa:95:76:c3:1a:6a:0e:6f:28:
f9:cd:b7:6f:8e:f4:fa:53:93:48:fa:ef:ed:7f:b0:69:ab:cf:
c5:68:c4:67:8c:16:aa:28:b7:93:ed:91:13:fb:29:21:af:98:
8f:8a:15:89:1f:50:1b:b5:96:ad:65:25:cd:65:50:e3:bc:45:
0d:81:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:09 2025 by rpki-client