Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: b5c4/EA06d9DXc1pdWQQrM8SxYCKotjnORCQ6d19Ipo=
Subject key identifier: 7E:79:A2:09:09:D7:EB:36:D2:36:90:C5:11:1C:4C:5C:5F:EA:96:20
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 0198D4A83F1C0F0C63D5327E893435018620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 064A
Signing time: Sat 23 Aug 2025 02:00:52 +0000
Manifest this update: Sat 23 Aug 2025 02:00:52 +0000
Manifest next update: Sun 24 Aug 2025 02:00:52 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: wF0N97DYdmoi8BZJmoUmXExO/raaFKrpzs8w8ic1mJ8=)
2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3f:1c:0f:0c:63:d5:32:7e:89:34:35:01:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Aug 23 02:00:52 2025 GMT
Not After : Aug 24 02:00:52 2025 GMT
Subject: CN=7e79a20909d7eb36d23690c5111c4c5c5fea9620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:15:f7:c7:5b:31:20:96:3b:7f:ff:95:c0:
e2:60:0e:e2:00:77:77:a8:30:c4:65:91:17:25:81:
be:22:2b:9c:56:11:41:e6:11:45:44:3c:d5:04:4c:
d8:e0:39:ae:70:71:b3:e3:f9:6b:e7:9b:7b:89:79:
01:2e:47:30:16:04:95:1d:00:df:36:0b:b0:2e:f3:
f1:5e:97:fb:90:12:2d:45:ee:b1:a6:75:71:56:48:
45:a9:9b:5a:ab:6b:05:c4:30:5a:45:0b:60:8b:38:
05:ae:26:1c:ef:74:06:77:20:34:b4:3e:d4:59:13:
9c:87:ba:73:47:a1:3e:3b:93:52:76:fe:72:54:b9:
60:7a:a2:86:26:c6:af:03:c5:64:1c:c9:e6:b8:84:
f8:41:b5:c5:f3:ed:d2:71:6c:4d:5e:45:dd:f2:0e:
1e:e0:3d:4f:50:f0:d3:02:1f:cf:69:78:53:7a:b8:
0c:82:6d:b8:c3:90:8c:e1:98:45:80:9f:1d:fe:4e:
a7:35:a2:41:7d:6b:47:1f:04:28:51:c5:6a:c6:b7:
e6:1f:b6:48:ae:db:5e:fb:37:f3:e9:bc:20:8e:d0:
1b:3d:75:af:e1:33:db:6e:d9:57:45:83:66:89:d3:
65:5b:ec:c5:ee:aa:92:d0:55:e7:3a:67:e2:0b:ef:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:A2:09:09:D7:EB:36:D2:36:90:C5:11:1C:4C:5C:5F:EA:96:20
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:41:6f:1a:c4:45:e5:24:d4:bf:37:63:61:64:a3:82:eb:
f9:57:a0:3a:6a:3a:7d:33:57:dd:30:3a:f9:6f:9c:ff:80:62:
b2:08:24:b8:d9:ed:d9:7e:84:ab:fc:59:7e:10:7b:b7:07:75:
d4:a1:91:7f:ea:16:bf:bc:52:d9:d1:28:77:c0:bb:82:8d:f3:
35:33:d9:ee:aa:77:92:3d:3a:1f:6d:7d:e8:18:19:cf:ae:a1:
1b:13:86:be:8c:84:09:12:33:d8:67:4b:61:53:11:1c:c9:c5:
46:ce:c1:8e:18:34:e3:45:62:43:4c:1b:e8:65:9e:15:9c:38:
26:64:2c:b5:da:19:87:9b:b8:01:1d:db:c0:09:96:a6:79:c2:
df:7d:01:4c:60:32:9f:18:6a:a9:6b:7a:af:08:0a:8a:f0:7a:
6b:e1:4b:6b:1b:95:83:9a:69:89:bd:72:8f:ea:55:d7:81:d0:
23:db:f1:4a:44:50:a3:ca:72:69:80:cf:66:5a:46:82:73:85:
70:58:11:ee:42:8b:8d:21:20:4f:08:65:43:6e:35:c8:6b:43:
c1:6c:9f:71:58:ed:1d:cd:22:f0:53:3c:56:62:0c:4f:dc:49:
13:49:2d:f6:b2:24:0e:56:89:67:11:a8:50:34:0f:30:f5:00:
a2:d5:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:59 2025 by rpki-client