Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: zp6YRx37KOjkUSG3a0+9j76cn6EaFMykGkVTl91dqGE=
Subject key identifier: 05:20:C0:CA:85:F2:4F:D6:E3:20:92:5B:83:94:D0:4C:2D:DA:F9:67
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01985645C389E197D629D8FA24F93BBDDA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 02C1
Signing time: Tue 29 Jul 2025 13:01:09 +0000
Manifest this update: Tue 29 Jul 2025 13:01:09 +0000
Manifest next update: Wed 30 Jul 2025 13:01:09 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: sBFJizhXWp0WQTYxpef2TadltAWqX27FDwaKXKoLjXM=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:c3:89:e1:97:d6:29:d8:fa:24:f9:3b:bd:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jul 29 13:01:09 2025 GMT
Not After : Jul 30 13:01:09 2025 GMT
Subject: CN=0520c0ca85f24fd6e320925b8394d04c2ddaf967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:e3:b3:25:b6:1e:f2:d8:c4:28:40:89:a9:
66:31:fc:4f:f1:12:96:f0:62:84:2b:3a:7c:3d:d5:
47:ea:34:e9:f4:fe:8a:95:70:35:fa:aa:f5:55:72:
e7:6e:ee:d6:b6:1a:b3:bd:76:03:c3:1e:78:2b:56:
12:4b:73:c0:ca:58:4a:06:a2:90:2b:94:54:aa:34:
f9:f5:b7:78:48:4b:c2:79:10:1e:41:13:a8:e2:b5:
9e:7d:59:7c:30:96:0a:ac:b5:38:9e:d9:5e:98:7a:
f0:7d:a5:9b:42:fa:ca:de:5d:2b:0e:4e:95:81:d1:
63:8b:d6:00:b3:b1:44:2b:c4:3c:40:4c:36:5b:ff:
cc:eb:6b:43:4e:6b:c0:71:b9:f2:8d:f1:4c:14:13:
25:b5:62:43:5e:d1:5b:87:71:b8:9f:c0:fa:c1:d8:
76:77:d8:c3:8e:9c:76:9e:8c:51:e4:02:88:fd:40:
f7:b2:f7:a8:e5:ea:16:fd:7e:be:46:0d:39:75:2c:
36:0e:ba:cf:3a:19:84:4e:03:f3:d6:cf:65:42:21:
26:30:a0:f1:64:9e:2e:f9:0c:3b:f4:7d:cb:97:ea:
ed:0e:59:d2:c7:7d:43:97:b3:8b:8d:b1:11:3a:c5:
ef:15:ff:b5:3d:82:06:d1:fc:76:08:14:70:09:37:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:C0:CA:85:F2:4F:D6:E3:20:92:5B:83:94:D0:4C:2D:DA:F9:67
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c0:c6:89:e1:e5:11:6d:b6:05:20:4b:12:9d:07:2a:15:7a:
7c:6f:5c:fe:6a:42:90:ee:8d:93:3c:67:5f:80:96:86:10:4c:
44:7c:49:03:81:1b:f2:da:59:70:12:71:62:41:b3:ec:dd:68:
2f:1d:23:e4:4c:10:ca:de:c6:b2:53:8e:36:09:1e:5d:fc:3d:
e5:5d:9e:e6:36:70:50:09:c1:e0:d1:6b:a4:5b:70:7b:7e:9f:
c9:19:0c:4a:8c:fd:36:5a:a8:d1:d1:14:34:59:3c:80:39:2b:
8e:75:f2:64:ae:98:f3:75:42:17:e8:c8:8a:0a:09:b3:1f:35:
12:46:42:b9:05:2c:ac:fe:5f:d1:fa:8c:2e:78:99:b8:ff:0a:
da:12:cf:e6:f3:87:08:8f:96:7a:8e:c9:b2:f5:d2:77:9f:87:
be:a1:4f:cd:70:e0:73:0f:6e:71:38:2b:a8:ea:54:ce:7b:84:
f1:21:2d:49:d4:4e:aa:49:7f:4a:7b:59:2c:55:4a:73:89:8c:
0f:9e:10:32:78:40:fb:a5:af:be:9d:24:6d:22:ca:76:00:88:
43:90:81:14:e8:ee:8b:aa:0c:38:44:3d:f9:9a:f4:6e:aa:63:
96:8a:e9:b6:b1:28:a5:0b:ca:04:df:15:1b:cb:4e:36:2b:88:
36:a5:ba:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:45:54 2025 by rpki-client