Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: 3DoqqIJe77rnB2yLxWofRACxFmZPV521rnxuWeL2+Oc=
Subject key identifier: 4B:1D:03:8B:32:39:89:3B:A1:E8:FA:9B:B8:26:27:80:A3:EE:29:5A
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0198D5BC10031596046751A1586D1AE732F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: y0pWDXyBE/Zbq/bPcSDFut5OYE1rUYKg2nT8sjMSnbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:10:03:15:96:04:67:51:a1:58:6d:1a:e7:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=4b1d038b3239893ba1e8fa9bb8262780a3ee295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:47:1a:80:b2:b3:ba:ee:f5:70:12:44:11:
24:e5:54:89:9e:03:d8:27:e1:99:8d:c6:b0:b4:76:
d7:6b:93:35:27:8b:08:f4:f7:36:cd:e4:3a:76:82:
8f:35:c9:5c:22:9a:a9:55:8f:41:f5:69:c8:8e:53:
33:d5:f0:80:df:25:9b:7b:d6:d4:ea:66:0a:8f:a6:
cf:7c:0f:e0:41:3f:0b:d8:04:7c:d7:6f:59:4e:7c:
2d:1f:0f:af:0c:98:5e:87:3e:cf:f7:af:c6:21:cc:
09:96:ab:2b:a1:73:ee:68:c8:4b:a6:99:96:eb:73:
99:e5:45:d9:db:4f:d1:cf:3d:9d:43:c7:84:c0:91:
d0:d7:3f:1c:f4:19:9b:04:6a:da:ff:79:e3:3e:b2:
31:49:32:38:53:45:51:ce:a6:54:bd:69:d0:94:48:
8d:ed:45:87:28:f2:6c:fc:84:62:92:9b:b1:5d:c3:
63:6a:ab:62:3c:b8:4e:7d:62:1f:cb:54:12:f4:87:
60:4b:65:83:75:21:64:08:36:66:3e:ef:e6:b0:d5:
89:71:b8:10:ad:bc:94:68:1e:96:fe:8d:ab:d9:13:
13:72:cf:c6:59:d5:aa:2b:b3:2d:99:01:04:f9:a5:
c4:c4:6e:e3:3c:a2:55:fe:b1:f8:a4:55:db:7b:70:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:03:8B:32:39:89:3B:A1:E8:FA:9B:B8:26:27:80:A3:EE:29:5A
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:92:b6:ca:5a:a7:4b:34:ba:45:56:f8:d1:9b:4d:a1:dc:96:
18:19:d4:bd:f3:5b:74:b6:97:43:d3:04:9e:ed:86:97:eb:8f:
ff:fa:ae:00:f3:69:9c:99:07:52:cb:e7:77:71:14:aa:d1:e0:
31:aa:41:41:fd:40:86:83:34:27:8e:79:ad:f2:67:95:d9:5a:
b0:cd:0e:11:e6:50:20:9a:5f:db:ba:be:e9:86:69:45:d6:9b:
00:ea:d3:2d:ff:0c:af:16:71:a9:17:b2:a0:dc:92:2c:6e:f5:
69:5b:61:0b:8d:f9:61:68:e9:0a:67:47:63:35:50:8a:a6:cd:
2b:ff:aa:76:e3:67:db:7f:0f:0e:f9:17:88:85:af:66:99:0b:
9b:89:f9:0d:1c:4f:31:18:c6:91:4d:3e:63:67:2e:f8:ea:8a:
00:1c:c6:92:bc:ca:d1:20:d6:9f:eb:c8:99:99:49:5f:52:f7:
ff:85:c0:68:82:9d:94:11:72:7d:34:bf:5a:61:9a:91:ad:04:
c8:92:91:7a:55:cf:41:c1:7c:cf:dc:49:e9:0d:9a:a4:1d:c9:
de:d5:05:02:f9:f0:3b:a5:43:c0:63:36:ff:21:5f:f8:3a:b7:
14:9a:97:ee:ff:1d:2c:7c:17:72:28:b1:7a:06:68:c3:72:d1:
dd:c8:fd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:24 2025 by rpki-client