Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: tGidPvG4gobWetsIVTRcK/r5A231WhN2dJjOnkQf3QI=
Subject key identifier: 99:C1:19:AC:D9:A5:3F:B9:47:3F:2A:2F:78:8F:87:36:EE:9C:55:95
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 019847ADAD96CE018FAF4B50E3CB062668A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0B5D
Signing time: Sat 26 Jul 2025 17:00:21 +0000
Manifest this update: Sat 26 Jul 2025 17:00:21 +0000
Manifest next update: Sun 27 Jul 2025 17:00:21 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: VMpHLt9ok4I1/ctR+zYO5jGWDqwrZzAWGos06K6XS2o=)
2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:ad:96:ce:01:8f:af:4b:50:e3:cb:06:26:68:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jul 26 17:00:21 2025 GMT
Not After : Jul 27 17:00:21 2025 GMT
Subject: CN=99c119acd9a53fb9473f2a2f788f8736ee9c5595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:ab:cc:a1:9c:93:b9:8a:b5:8a:d3:9e:69:
54:3b:7e:bf:87:f3:f7:75:62:44:c0:d0:eb:9b:8f:
5c:74:e8:ce:95:f3:2a:d0:7c:b3:8c:ed:84:4b:7a:
76:e0:cb:56:35:6b:06:8b:a1:7e:12:99:18:1b:87:
78:de:40:83:d2:4f:0f:dd:62:57:67:3c:d9:57:6c:
38:1a:62:37:37:f4:a3:25:1c:ed:82:ae:76:1e:a6:
56:eb:fe:91:30:cd:3f:47:ba:cd:92:a0:ec:f3:89:
90:66:23:f9:83:dd:4e:18:01:69:b5:37:2c:9d:4f:
e9:12:1a:a7:63:54:8a:aa:c3:63:9b:33:95:f1:57:
ba:c7:48:1e:16:fc:a1:9e:ee:b6:6c:39:96:7e:7f:
e2:b2:7f:5c:4a:e0:9a:79:95:4e:1d:64:5c:45:9f:
ac:8f:81:9e:3f:63:3f:06:57:08:1e:1e:5a:19:44:
08:67:3a:b0:a5:b4:ed:dc:25:45:1a:19:26:4e:3d:
a1:1b:22:03:c3:52:cb:8b:89:f6:19:bf:7e:67:ce:
17:65:22:5c:5d:3a:88:16:8f:fc:ec:3f:c7:9e:8b:
45:38:25:77:4b:cd:f3:ba:5f:37:b8:20:1a:6c:64:
8e:bd:c5:fb:a0:dc:36:86:db:3e:13:8d:44:63:0c:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:19:AC:D9:A5:3F:B9:47:3F:2A:2F:78:8F:87:36:EE:9C:55:95
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:24:ee:c1:c2:4f:72:2b:d3:6c:d2:f0:4d:12:34:81:54:02:
24:18:6c:71:5f:ab:7e:ab:3e:85:3e:fa:29:f2:ae:f5:40:b2:
c0:fa:5b:93:87:ff:50:3f:92:6c:66:2e:a8:b5:7a:be:a9:a7:
7d:85:71:5b:2c:c2:22:f1:1d:23:81:8f:a4:01:68:33:41:f5:
4f:f2:af:1a:68:8a:e4:74:52:9d:47:40:34:d5:8e:f0:3e:5f:
f3:b9:69:69:ed:be:b4:7c:8c:37:58:ac:c4:d0:22:4a:56:e9:
ba:82:16:14:82:7c:51:8a:98:eb:52:58:24:2e:58:42:49:35:
93:2d:e3:31:a4:62:a8:54:f2:89:f7:25:03:6a:12:cf:dd:08:
5b:84:cc:d5:7d:b6:69:2a:2a:5f:3c:a9:e5:cc:57:94:23:9b:
e6:be:2c:ba:a6:e3:de:78:95:ac:16:2b:d5:ea:fd:5f:6a:35:
75:e7:f3:6a:9d:46:c0:e3:86:9f:13:4b:18:bc:92:ba:a1:a9:
ee:1c:39:df:00:dc:ac:56:ca:18:91:66:06:1f:23:2b:82:20:
14:06:91:be:4f:99:51:63:98:fa:c6:ae:a9:01:fd:a6:eb:b6:
0a:55:ed:c3:de:44:b7:da:98:65:72:e2:a5:5a:c4:e7:1a:69:
25:bf:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:19 2025 by rpki-client