Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: GodYoUqLectJOTUS7mZiq5Qc4tCAcNG892DhDEnlKck=
Subject key identifier: 53:69:63:93:8F:C3:E3:2A:BD:F5:F9:99:83:6F:7E:BA:15:38:E4:60
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0198391675CE151A40C86B861A3CCB3B2F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 15F8
Signing time: Wed 23 Jul 2025 21:00:29 +0000
Manifest this update: Wed 23 Jul 2025 21:00:29 +0000
Manifest next update: Thu 24 Jul 2025 21:00:29 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: YMcltLV4z9GubkzdnbiXPooUj9V5t4ukeeIfKQNZbwU=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:16:75:ce:15:1a:40:c8:6b:86:1a:3c:cb:3b:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jul 23 21:00:29 2025 GMT
Not After : Jul 24 21:00:29 2025 GMT
Subject: CN=536963938fc3e32abdf5f999836f7eba1538e460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:d6:96:85:b6:6e:62:cd:47:f5:e6:e3:82:
3e:05:72:a5:b9:fe:91:26:cb:1a:2f:b1:97:71:53:
a6:9f:b9:e2:e9:ef:c2:79:7c:bf:46:de:1b:ad:c1:
8c:2c:48:be:c3:f9:ec:6e:e0:aa:49:a2:5d:ee:b5:
f8:e1:dc:7e:c1:ff:f9:ed:9b:67:50:63:0c:71:02:
f9:14:b6:59:a6:51:3d:20:50:e3:30:ba:59:00:a5:
02:75:2e:2a:27:b1:1a:50:21:13:c3:02:7b:95:1b:
7d:94:df:ec:8a:bc:ee:34:5a:be:cd:2a:b4:43:dc:
d6:d7:c8:d7:c2:4a:c0:94:cf:9d:37:cc:4c:f7:7d:
f8:3c:9d:35:08:d8:66:af:66:0a:f9:e8:37:b4:b1:
6d:67:87:43:b7:cf:1e:5b:00:98:9e:4b:ea:fe:d2:
f6:d9:d5:e9:19:94:05:26:30:ad:94:9f:a7:cf:2a:
7a:0d:79:01:7e:3b:b8:84:dd:2a:71:14:3a:33:d7:
89:b1:85:c5:50:5e:91:c0:a9:76:9c:45:7a:33:c0:
de:b1:b9:6c:54:bc:1e:63:d7:46:36:1e:d6:b9:3c:
88:12:f6:77:ad:58:0c:eb:e2:6e:ef:74:ba:63:e8:
cd:6d:44:32:ae:0d:80:69:7a:f3:8c:ec:bb:da:49:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:63:93:8F:C3:E3:2A:BD:F5:F9:99:83:6F:7E:BA:15:38:E4:60
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4c:b3:1f:3f:99:fe:72:f4:3b:bb:94:2f:06:b2:6d:73:c3:
56:e8:7b:af:b5:5b:0a:ac:b1:1a:57:6d:9e:0f:7a:26:db:46:
ca:37:44:a6:6b:6f:27:65:d5:84:de:3c:3d:27:b6:29:a9:f7:
9e:29:8d:73:5c:72:79:f4:b2:d8:b4:fd:59:3d:b4:e7:16:04:
95:32:85:33:02:98:7b:11:1d:57:19:a7:44:39:43:f6:ad:1f:
a4:c6:00:21:71:ee:e8:40:90:f1:ab:e4:c8:90:3e:6b:05:94:
53:cb:a7:59:b0:8d:45:f1:2b:94:4b:a3:ce:7c:dd:87:f0:56:
39:9a:3e:ec:34:0d:6c:f4:24:bd:21:09:6f:52:79:62:e2:2a:
52:2d:80:37:b4:cf:7c:8e:a7:9d:a9:f7:48:48:f5:8c:70:65:
5f:f4:94:7e:0a:c1:90:74:9a:ff:66:84:91:fe:1b:0d:c1:e9:
3e:a4:a8:bb:4c:c5:88:7a:86:b1:06:66:6d:30:39:4a:f8:da:
7b:63:31:31:d3:1f:aa:c0:21:60:1c:ff:80:49:41:f4:56:06:
46:8a:b6:a1:c5:78:ea:7e:82:e5:40:48:0f:2f:5f:3c:76:a9:
0d:59:da:a6:44:ac:b1:3a:97:e7:01:20:dd:8e:1f:ea:fb:98:
99:ed:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:13 2025 by rpki-client