Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: 7nLDZohYlE0v2PVd6EGsvb3RUwNG9xcXEBpqLj/v6MI=
Subject key identifier: FF:7A:78:BB:A2:0A:F1:A1:0A:21:09:3A:CE:F8:51:D0:EA:93:DA:32
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 0198D4E00BC35ABCDCD93D3030B65B69F6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0C47
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: hfwq+lXGA/cLP5+WHLOF3yVkehXpkgcjA/lhJoZWZ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0b:c3:5a:bc:dc:d9:3d:30:30:b6:5b:69:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=ff7a78bba20af1a10a21093acef851d0ea93da32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:fa:7e:4b:26:aa:18:69:97:58:a8:e2:e7:
51:d5:9c:86:61:e8:c8:5c:23:89:64:89:77:24:5a:
0e:95:83:58:68:36:8c:09:ca:a4:a8:4d:1b:b3:62:
d0:69:f8:dd:72:55:af:88:28:8f:3f:7c:25:cc:73:
1a:31:f8:44:67:39:76:3b:43:47:94:90:c1:42:f2:
03:39:7b:7e:40:0b:dc:13:5e:a8:07:6d:f1:c0:c1:
41:5c:23:65:1c:5e:5a:ed:fb:9d:6e:87:34:27:da:
36:c0:ee:7f:88:85:28:47:f5:d0:3d:8a:83:7b:4e:
11:d6:2b:c2:94:81:91:b6:5b:92:fe:5c:5f:9a:c0:
81:74:d7:d7:d2:ce:45:5f:fb:72:55:40:8b:44:11:
8f:ce:dd:03:52:15:79:73:d2:ce:70:c0:f2:7e:44:
21:ab:3a:84:57:8e:82:63:57:3b:4c:d0:8a:dd:8f:
56:f9:4c:c4:b3:48:3f:d6:16:a0:a1:9a:9c:fd:06:
9e:1d:53:8f:21:fe:71:ca:2d:9d:0d:13:29:7b:5d:
14:f0:9f:43:82:8c:fe:47:31:52:e5:f2:86:a0:7f:
f2:05:80:23:a1:49:48:d0:5a:a9:a0:7d:2c:a5:5e:
9b:33:4f:69:de:98:10:ab:1d:5b:4a:1d:2f:42:42:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:78:BB:A2:0A:F1:A1:0A:21:09:3A:CE:F8:51:D0:EA:93:DA:32
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:f9:a1:87:ed:33:5e:5c:b8:2d:47:da:9e:83:20:99:50:
6f:da:17:4b:51:b8:1d:15:ff:1b:97:4d:49:33:76:6f:00:c5:
fd:ce:d5:88:42:6a:1a:17:a9:0a:f8:e1:fd:62:9d:d8:97:4f:
b1:54:b1:de:5a:d1:fa:32:c7:7a:44:cd:63:0a:5a:37:51:c6:
2b:4e:75:28:92:64:24:81:4c:b6:48:58:0f:bf:ce:b5:2a:0e:
43:a1:e7:c4:96:2c:d2:3b:dc:e4:aa:ea:02:7d:bd:54:d3:96:
53:ff:3e:5f:ee:68:5d:f3:54:4e:33:73:07:57:2f:25:b9:0c:
85:65:7a:a1:73:bd:20:ed:2d:fc:1a:6c:2b:e5:4a:63:0f:99:
2e:27:b7:7c:d3:7a:0a:6f:21:0d:aa:af:dd:00:c2:ba:d9:b8:
ec:97:bf:9d:97:82:76:b5:11:77:dc:25:e8:81:79:28:62:3f:
b6:b7:06:60:3c:77:2a:e0:ef:28:94:fd:c7:3d:a6:64:7a:45:
f3:8a:56:9e:4d:fb:20:7c:1a:07:0b:85:98:4a:9d:b1:66:58:
7a:a4:30:d7:40:d4:15:7f:8c:63:9c:3b:54:52:48:7c:c4:7e:
87:df:74:7d:79:79:a7:35:2f:89:75:f2:b3:ce:94:ce:cc:a8:
01:98:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:44 2025 by rpki-client