Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: QDyIBzP0yqdqYJjcnrga8svx/EcSVehTMaeTmn4odW8=
Subject key identifier: E9:3C:29:E2:41:A5:67:39:6E:01:BD:6A:3A:C8:13:2D:B5:00:A1:8B
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 0198D4DFEB100FD8C09948AA1A34061AC627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 0195
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: +EYYpY9j3NIqBvEFb0RAZTNyKtvmnhzERZw7JrOgr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:eb:10:0f:d8:c0:99:48:aa:1a:34:06:1a:c6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=e93c29e241a567396e01bd6a3ac8132db500a18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:dd:a9:2f:d6:d9:a2:5a:ae:10:51:ca:c4:
ef:70:5f:1b:08:c0:0f:b5:55:63:89:97:02:81:47:
06:78:e2:df:9c:4f:4e:1d:8f:a7:05:69:2c:c0:25:
1a:c0:26:44:d5:4d:88:c2:ca:c5:2d:5b:ca:0b:cb:
2f:9a:d3:72:bd:ef:cc:15:68:c1:b3:92:a1:81:47:
64:37:1a:fa:11:25:44:41:c1:0a:be:fb:e1:08:03:
06:33:a1:d2:dc:c0:c5:6f:9e:ea:16:80:b7:fc:b9:
3e:10:37:06:8b:8f:3a:2c:12:cf:e8:6a:cd:27:d1:
c6:52:bc:ab:6e:28:07:72:11:d5:f7:ee:32:5d:66:
d7:4e:98:75:50:f6:bd:64:ef:80:64:29:12:d4:e1:
f3:85:d7:b2:b9:28:bf:08:e1:c6:82:d4:37:d5:f6:
4e:72:0a:96:05:6e:10:c6:54:9d:07:d4:da:66:a1:
02:c3:42:81:21:3b:19:8a:02:15:be:11:c4:ac:6b:
d8:7f:85:31:a9:79:4e:d8:dd:14:4b:18:ce:8b:3e:
3c:9a:50:01:38:df:d8:00:1c:13:bb:7b:15:19:1d:
28:48:35:53:8b:27:31:6f:a0:e7:06:20:3f:84:f1:
eb:d2:eb:1d:c8:1b:83:8d:4e:ef:25:b1:fc:2e:81:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:29:E2:41:A5:67:39:6E:01:BD:6A:3A:C8:13:2D:B5:00:A1:8B
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:0b:17:c8:af:21:e5:ba:80:c5:c2:e4:09:b7:2d:c4:33:
16:34:cb:8c:85:5c:30:97:4d:df:49:d0:80:5f:92:46:c1:81:
f5:22:23:42:e3:c5:35:df:8f:48:78:3c:f1:31:bc:36:6f:1c:
8e:01:92:85:7c:fd:d6:6c:c4:3d:46:b3:c9:a3:0f:70:0e:74:
66:59:eb:2b:c5:ed:af:6d:fe:50:d5:cc:5f:02:56:77:b8:54:
2f:11:ab:86:27:ef:64:f1:d5:58:49:33:74:41:9f:f7:4c:89:
84:f8:7d:a5:dd:aa:bb:44:fc:53:ee:aa:db:4f:29:1c:56:bf:
e8:5d:49:53:35:7f:cb:ca:e3:db:16:aa:cb:cc:3f:78:56:ee:
d7:8b:03:1f:83:79:55:e3:43:ac:dd:53:d8:73:72:95:d4:75:
a3:b6:34:34:7f:a7:4c:68:0c:3f:42:06:d0:17:f8:d3:73:72:
d1:95:22:b4:a9:d4:16:00:b6:25:75:d8:b1:5a:ca:5a:0e:18:
ef:41:eb:9f:5a:b4:df:08:7a:3b:63:82:1f:27:fd:38:4f:23:
82:e2:5d:a2:3c:d5:cf:c4:36:0e:fb:69:09:73:83:b7:89:fb:
26:4d:10:ee:9d:7a:a2:48:bd:8c:cd:fc:c8:5a:68:f6:03:24:
bd:bd:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:46 2025 by rpki-client