Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: fL15g4lAnxLLoifSgZXMFvqrG5TPzL81pDSW8SZyzL0=
Subject key identifier: 27:03:2B:E3:24:4F:08:6E:EC:1F:E6:61:47:A6:FD:BA:F9:89:17:08
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 01982AED175D91E0F272794A3341EA6607E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 12FF
Signing time: Mon 21 Jul 2025 03:00:37 +0000
Manifest this update: Mon 21 Jul 2025 03:00:37 +0000
Manifest next update: Tue 22 Jul 2025 03:00:37 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: zlUKg7lUy8G2iMzFtBh5uYpuVB7AXzav+6eN6ec6fiM=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:17:5d:91:e0:f2:72:79:4a:33:41:ea:66:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Jul 21 03:00:37 2025 GMT
Not After : Jul 22 03:00:37 2025 GMT
Subject: CN=27032be3244f086eec1fe66147a6fdbaf9891708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:8f:5d:67:ba:42:19:bd:90:65:04:d0:12:
f2:f5:6d:a6:9f:d5:8d:b5:2e:78:58:b7:97:fb:f9:
46:d9:ee:cc:07:54:80:f8:b9:e0:7c:e2:16:05:97:
94:c1:28:df:96:c6:56:39:1c:b4:16:df:8d:dd:60:
76:18:eb:a2:4a:b4:fe:ec:75:b4:db:2e:5a:9b:ac:
9c:8b:67:bd:98:18:8c:62:b5:f5:c2:c8:9b:26:4c:
82:a6:f7:d5:45:0d:59:3f:68:1e:d0:13:2f:da:13:
22:aa:e8:83:14:56:6b:ec:39:c5:30:52:30:c6:6c:
5d:2b:da:27:1e:e1:6f:9e:f0:5e:aa:8d:14:da:84:
ba:92:b9:07:4d:61:99:4c:7b:1a:25:05:8f:76:71:
b8:2e:60:3b:a8:36:07:2e:52:90:16:0c:55:b1:e3:
a2:a7:f3:2d:8a:fb:da:78:f5:40:67:10:94:3d:f3:
2e:6a:b6:31:7e:ea:08:89:ad:2b:f8:59:c4:e1:d7:
d5:cb:c5:49:89:66:56:23:2a:66:00:a5:c4:ea:06:
d7:fc:d1:7a:61:ed:46:24:28:b8:22:f4:ab:c8:24:
89:e0:35:e4:61:57:85:66:ac:37:29:d5:49:25:01:
84:90:ac:4a:1d:5b:a5:8c:b5:07:d8:fb:be:8c:ba:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:2B:E3:24:4F:08:6E:EC:1F:E6:61:47:A6:FD:BA:F9:89:17:08
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:42:10:98:5c:6e:f2:65:52:c5:63:cb:b9:67:7f:e3:4d:
3e:5f:df:d1:b3:cc:59:5e:07:00:60:e4:b6:5f:aa:45:ab:7b:
c0:3d:87:b0:5f:0c:ed:7d:f0:d6:fd:b6:64:bd:66:84:00:81:
a4:f5:f6:4e:4f:a8:a9:c8:83:e1:f6:9a:78:e7:02:aa:ef:cc:
a0:36:ee:09:36:1b:75:65:b5:ea:0d:e6:e3:a6:ab:31:b6:75:
da:0c:0f:28:1f:8d:7e:bd:71:dc:10:dd:71:29:2b:3d:73:c3:
47:d2:81:cd:47:af:62:22:42:99:27:f7:e2:f6:99:c1:b1:78:
36:ef:7a:16:aa:1a:c3:94:08:3f:e8:86:19:ab:29:25:e4:20:
6d:e1:ec:23:39:34:d8:ff:24:26:87:f2:c9:ad:b6:2f:10:2e:
08:3d:38:ba:cf:9b:88:2d:fb:97:a4:5e:4d:8c:28:66:a2:91:
36:3c:ab:4c:5f:d8:6d:98:6f:9c:ee:6c:50:3f:22:f1:e6:26:
ca:5c:30:7e:bc:d7:de:c6:50:c9:43:62:4f:44:8d:8f:b4:79:
80:da:d0:67:9a:b5:94:67:13:15:bc:ac:15:4e:a7:03:be:d4:
40:5c:13:69:18:58:51:42:96:e2:e8:9e:d8:80:76:c9:66:4b:
29:9f:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:46:03 2025 by rpki-client