Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: WzuK15CjctbdGa7vdfBhLTGOike+BsB1zeD2aiOIz4Y=
Subject key identifier: 1A:80:DC:69:6A:5E:D2:33:9E:ED:C3:03:90:B7:4C:E9:08:14:AB:DD
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01984A09D34C223B64F04F8D2BCE02A33436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: /GwjObkQbkcsS4mKN62Kd1aeano3wHeP2N/IKinESbI=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d3:4c:22:3b:64:f0:4f:8d:2b:ce:02:a3:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=1a80dc696a5ed2339eedc30390b74ce90814abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:9c:79:88:d2:d3:ca:c4:82:54:e0:51:77:
ef:26:1f:79:b1:cf:35:d9:eb:a8:24:5b:4b:58:fb:
09:22:c6:26:f6:bb:c8:87:38:5a:5e:1a:63:43:d7:
66:d9:0c:7d:91:b2:5a:fc:a3:8e:fb:a3:59:3f:8d:
ef:97:3b:43:12:05:8e:f0:b3:41:1e:29:41:f6:2c:
49:9b:c1:38:88:40:01:bd:d2:28:3d:22:ec:cc:85:
b9:a0:ab:69:74:69:0d:a1:9e:84:f3:a7:a8:59:73:
73:1d:2b:f0:74:ab:96:fa:2b:2e:75:63:5b:aa:c5:
53:d9:be:1f:04:fd:68:dc:ad:b7:17:44:fd:89:ab:
69:5a:dc:b5:35:9f:7c:38:a3:9c:fb:64:33:5b:cb:
1f:24:ed:68:cc:01:b6:c2:96:14:b3:54:d2:75:93:
a8:73:78:93:d7:4e:2c:72:13:d7:5b:ab:33:a4:5f:
ac:2a:d1:6c:b0:d0:64:b5:9d:a9:13:65:36:13:b2:
3d:4c:b9:d2:eb:31:c3:c4:ff:1f:ef:d5:92:84:86:
9d:3d:67:ab:7e:44:99:5f:48:d5:64:0b:9b:2a:ba:
8e:5b:69:44:60:9e:b8:b1:0b:ef:a5:3f:7a:71:c4:
c1:a2:ea:cf:4e:df:4e:35:aa:31:09:71:09:53:74:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:DC:69:6A:5E:D2:33:9E:ED:C3:03:90:B7:4C:E9:08:14:AB:DD
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:a2:c4:66:7d:c3:6d:3a:ef:93:09:cb:fb:76:7b:46:f1:
61:3e:50:08:cf:b5:4f:db:d0:ef:ca:cf:04:b9:6e:09:02:7b:
ab:1c:d2:17:e4:b3:87:c0:a2:00:da:29:82:5f:f0:a8:69:b2:
f3:b3:65:9d:f3:12:db:53:07:88:b7:fd:4f:5d:e4:1d:ea:35:
17:82:b8:da:d7:0e:aa:cc:21:58:cc:3c:cb:a9:39:3e:ea:b5:
a5:13:e1:cc:51:2e:4e:c1:a2:99:20:56:a4:e1:09:54:4a:14:
9d:a4:b0:d0:ac:6d:7e:99:c7:2e:40:1c:1e:86:93:77:47:a4:
6e:2b:ba:6f:64:50:50:97:d3:64:8b:66:ee:0d:1f:dd:49:4f:
64:93:cc:18:1e:af:3c:1b:98:93:4f:48:0e:72:a3:87:6a:63:
77:0a:00:28:34:2b:f4:78:d6:c7:bb:a1:5e:27:30:d8:c4:f8:
0d:d8:b4:ee:82:75:53:9e:17:63:40:e2:4c:a6:17:6b:a7:ac:
74:e6:9c:66:c0:67:c8:d1:24:ed:92:81:de:40:7f:fd:2c:ef:
11:89:a6:bf:5d:7b:b9:d5:be:3d:64:82:bf:cc:0a:c4:97:66:
b6:fd:c4:69:de:48:e9:37:1e:31:c7:f1:17:64:a7:ee:e3:8c:
98:b4:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:42 2025 by rpki-client