Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: p/xaqPy+mDqsh+3omlN8ZZeuVtjTgTDbQtSD0Wp9RfE=
Subject key identifier: 93:35:45:F0:EC:B1:36:BA:99:36:0C:74:24:D0:AA:11:05:E4:F7:DD
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 0198530D8B37ED32E3129B78EB9505B5B956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 10BC
Signing time: Mon 28 Jul 2025 22:00:53 +0000
Manifest this update: Mon 28 Jul 2025 22:00:53 +0000
Manifest next update: Tue 29 Jul 2025 22:00:53 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: FBng6UiNIixValQvwQu/S2DWZefg2G+TFpo0W9dyQMU=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:8b:37:ed:32:e3:12:9b:78:eb:95:05:b5:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jul 28 22:00:53 2025 GMT
Not After : Jul 29 22:00:53 2025 GMT
Subject: CN=933545f0ecb136ba99360c7424d0aa1105e4f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:39:99:66:8d:42:66:6e:14:7a:9b:4d:a8:
93:7e:13:1f:a7:fe:85:1c:37:d3:9e:8f:29:f0:ce:
70:36:84:a0:05:ac:8f:62:fa:2e:26:b3:53:ca:90:
05:39:45:d8:bb:29:9c:cc:87:06:db:fe:f0:31:97:
e6:f7:a7:32:38:4a:a8:3c:e7:c2:44:54:42:5a:7d:
6d:e7:52:5d:8b:9a:c5:1a:02:8f:d5:f6:d1:d1:25:
16:03:78:2f:c8:fd:4d:0e:1c:dd:a0:75:f5:de:fd:
fb:ba:5d:21:3e:b8:4f:f4:f8:5a:a8:e2:e8:b9:53:
53:d2:18:93:25:7f:2e:57:7a:54:14:4f:52:e8:8a:
0e:b0:80:31:79:59:06:20:72:b0:8c:53:e6:6a:41:
15:69:93:ad:21:01:68:5e:5e:53:7e:0a:a9:10:a6:
14:2d:e5:73:64:ec:2a:87:33:31:50:4a:32:48:a6:
1b:ef:3a:56:8f:da:21:7d:83:5a:1f:a9:75:14:35:
3a:83:56:5d:15:49:f7:7c:ca:75:e2:f2:03:25:b2:
2c:a5:47:cd:3a:43:fb:10:e4:63:ac:b5:1d:4c:a2:
ed:0a:d4:5a:dd:56:67:ec:28:de:9a:74:94:30:cf:
02:93:bc:3b:34:f2:b6:1f:fa:70:07:e1:e2:b3:be:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:35:45:F0:EC:B1:36:BA:99:36:0C:74:24:D0:AA:11:05:E4:F7:DD
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0d:23:5f:e7:f1:93:0c:da:7c:a2:ae:95:7f:53:ee:fc:97:
ca:0e:5f:66:db:29:04:1a:0f:f4:86:c7:40:b2:dc:1b:e0:bd:
e5:29:71:17:fa:60:3d:a9:ce:5d:1d:87:3a:32:7c:8d:10:6d:
fa:fc:2c:f4:2d:5d:66:8e:2f:f9:44:11:b2:76:53:e4:40:2a:
01:4a:77:2e:8e:95:c6:5c:a8:0b:06:26:23:35:09:a5:f8:78:
15:51:ec:42:30:8f:c9:23:5e:d1:88:60:e1:e9:e7:ef:6b:90:
fb:45:1b:d9:95:1d:28:1d:2a:3e:5f:31:25:25:e2:68:d3:5a:
9b:5e:0c:cb:a8:0c:61:2c:32:66:53:ec:54:8b:5c:5c:ed:14:
d1:4b:3c:10:23:16:8d:32:3a:b2:0d:9c:df:d6:1c:f9:dc:0d:
6e:7f:36:23:81:55:ea:c5:5d:e5:96:89:c3:f8:03:d3:1c:97:
33:90:54:76:81:37:06:93:02:f6:b3:9e:6a:17:3a:3a:4e:7a:
bc:ee:e5:31:45:1f:d5:9f:c4:1b:b1:b6:a2:18:5a:36:58:30:
62:78:83:06:db:47:ea:b8:4a:1c:1a:76:d4:06:c8:80:a6:84:
c7:d6:0f:f2:25:1d:8d:66:d7:d6:3f:55:ac:55:d6:61:14:7b:
38:a7:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:42:13 2025 by rpki-client