Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: QUB/wBApLMWw79yNAbjM2tOE+clKgyshG/fxWB7CQ7E=
Subject key identifier: B7:CB:B0:AD:0C:D8:38:4F:27:67:6C:AB:B9:3B:5A:8A:C0:E1:D1:00
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 01984A40DC85E0C7DC053F46B58863017AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0C08
Signing time: Sun 27 Jul 2025 05:00:21 +0000
Manifest this update: Sun 27 Jul 2025 05:00:21 +0000
Manifest next update: Mon 28 Jul 2025 05:00:21 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: aaun29IjjzEGs2ATy55XtZi/URVQqyRGRqZOHRVyxb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:dc:85:e0:c7:dc:05:3f:46:b5:88:63:01:7a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jul 27 05:00:21 2025 GMT
Not After : Jul 28 05:00:21 2025 GMT
Subject: CN=b7cbb0ad0cd8384f27676cabb93b5a8ac0e1d100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:35:0b:f1:b4:ec:64:3f:0d:23:bd:d5:d5:
d8:1b:d5:94:4f:40:cd:53:db:12:16:bf:04:7f:d7:
c6:00:44:ab:19:8b:ce:75:f6:fc:f4:0b:a9:cb:af:
72:af:21:58:57:17:8a:6d:c2:d5:ad:58:69:e1:a6:
dc:1a:e9:1b:97:67:e1:d0:b2:f3:b0:b7:5c:7f:3d:
80:c9:da:f9:02:2b:2e:d5:ef:d3:c8:de:77:54:91:
63:69:5c:47:ec:a7:1d:47:e1:27:8e:75:a2:ba:b0:
4b:69:20:52:90:ae:13:dc:76:45:f3:e6:e1:75:b0:
a7:09:31:29:3b:48:60:06:d5:aa:93:fc:2d:00:f9:
a3:46:f1:50:0b:0b:14:b6:8e:97:d6:81:2c:ea:0a:
23:a9:c0:37:2c:33:2b:ff:28:0f:b6:06:5d:c1:e3:
5f:6d:94:07:30:68:05:21:93:51:08:78:4d:31:ae:
3f:fb:55:8b:b6:dd:da:52:9e:75:6a:18:72:ba:8c:
9c:5f:75:ce:aa:8f:37:31:17:9f:ae:f5:49:17:8e:
53:95:02:e1:c6:df:60:b6:74:7a:95:98:2b:14:27:
27:56:49:fc:f1:19:ac:fc:4d:16:96:16:45:ac:4b:
42:03:f9:18:e7:61:01:5d:bf:ce:f8:1b:95:bf:34:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:B0:AD:0C:D8:38:4F:27:67:6C:AB:B9:3B:5A:8A:C0:E1:D1:00
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cc:44:71:df:6c:7f:8a:55:9c:80:a9:fd:88:ed:01:7c:65:
2d:e4:a6:9f:79:73:e6:f8:fb:57:c1:75:e1:f0:64:ec:a7:17:
4c:73:7e:4e:6c:66:9b:b2:bf:fb:7f:9d:1c:d4:65:4d:be:bd:
d6:40:18:44:ec:dd:7f:5a:81:ca:d7:74:a3:6d:50:85:eb:92:
3d:f1:91:a6:39:a8:41:2b:00:7e:2d:9c:25:b2:75:dc:6b:bf:
ae:d3:3b:24:70:f4:29:5a:9c:1e:13:a4:43:ca:56:b5:51:ec:
06:1f:91:ca:a2:9b:01:e9:28:24:70:db:8d:97:09:0f:64:f2:
2e:bb:a7:96:9f:32:fa:80:d1:af:b9:4b:c5:6f:29:e2:71:62:
9c:92:22:43:30:8c:c4:08:25:d5:7c:5f:a6:57:1c:21:58:4d:
3e:eb:12:9e:e2:16:3c:18:27:1c:e6:6e:97:04:a7:c5:51:bc:
89:89:29:f4:05:89:11:91:f1:ef:3e:2f:aa:01:66:3f:a2:1e:
4c:98:a3:cf:49:8c:2b:2f:8c:73:62:d5:79:48:04:f9:d3:75:
b7:50:5c:67:e8:bd:07:33:98:6e:d7:05:9d:05:e4:5c:02:cf:
a5:79:45:36:81:b6:78:44:0f:fa:4c:f9:11:f0:23:06:d3:90:
ad:e3:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:48:25 2025 by rpki-client