Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: HmBYB99aKEoTZC2emvLXLaKTBQIABRifRJNpTludm6g=
Subject key identifier: DF:88:8B:EB:C6:40:3C:95:C8:ED:16:E0:AD:83:30:8C:BA:80:05:77
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 019848527A2F63ED0EAB0900052E3FCA9ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 131A
Signing time: Sat 26 Jul 2025 20:00:21 +0000
Manifest this update: Sat 26 Jul 2025 20:00:21 +0000
Manifest next update: Sun 27 Jul 2025 20:00:21 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: HKvHP6iCrSqxvaTgvxTBv/Oz+UoTaB316xbK0qbhM9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:7a:2f:63:ed:0e:ab:09:00:05:2e:3f:ca:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jul 26 20:00:21 2025 GMT
Not After : Jul 27 20:00:21 2025 GMT
Subject: CN=df888bebc6403c95c8ed16e0ad83308cba800577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:8b:71:10:d0:7b:2a:c0:3a:44:5f:04:96:
4c:36:c5:ee:63:a9:9a:0b:00:34:4f:4e:5c:2d:b4:
ed:26:10:4d:02:b7:d2:28:5c:a1:7a:80:95:13:3e:
69:8b:06:cb:61:db:1c:cd:83:7c:b6:dd:30:db:7a:
94:98:8b:3e:c3:ba:c8:d7:70:12:a3:92:ca:f8:c4:
f1:a5:4f:60:9b:d5:89:e9:f5:88:a7:81:56:34:ec:
57:83:6f:2d:f6:52:78:ac:61:23:63:52:3a:74:52:
0d:e5:e9:78:e1:5f:04:1e:5a:19:db:51:ba:10:90:
eb:cb:1a:37:e0:0b:2d:c4:80:cc:25:7f:8b:f6:67:
0f:9c:ae:d1:43:a3:a6:42:c0:5e:9a:87:85:12:6d:
86:d0:5b:e6:e4:f7:f7:99:78:de:21:0c:3c:04:54:
54:6d:5c:ae:b5:1b:c6:26:38:bc:ff:a8:9b:cd:b2:
6b:fe:8c:0b:33:32:e7:6a:13:96:46:c2:d6:52:89:
35:3f:be:42:f4:35:c2:53:05:6b:e5:de:26:53:a5:
ee:74:5f:b7:fc:9b:77:8e:1f:d6:90:22:ba:bd:bd:
1e:7f:d7:43:b3:4f:f2:08:b6:c5:94:3d:62:d7:ea:
1d:c7:12:3f:39:08:f2:62:3f:22:f8:00:c5:32:64:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:8B:EB:C6:40:3C:95:C8:ED:16:E0:AD:83:30:8C:BA:80:05:77
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:f2:64:8f:e2:d6:fb:4d:d6:23:7b:df:df:9e:47:b0:84:
48:65:97:34:27:15:51:53:75:f0:86:2c:1a:ad:89:1f:63:f0:
d1:3a:c1:20:dc:44:9d:95:36:f7:96:81:97:45:5a:c5:1b:67:
e0:54:b1:02:41:c3:1c:12:72:21:03:3a:28:05:3d:44:ab:03:
de:ec:64:b3:94:03:b5:7c:c5:2b:f2:96:12:6e:15:5a:e0:4c:
34:4e:83:a9:ba:84:b3:dd:d2:c6:87:bb:c3:ad:52:98:63:8a:
fc:a2:e2:61:70:12:34:a4:64:30:32:94:2b:68:e8:d9:6f:c5:
31:e0:a9:5b:b9:22:d5:10:7a:a2:d1:e8:d7:62:2c:f1:e7:42:
35:3b:c8:2f:ce:47:fc:7c:50:44:5d:cd:3a:97:0a:53:59:69:
f5:b6:66:cc:74:5a:8e:cb:24:11:13:88:35:6a:19:dd:81:01:
d7:d3:ce:83:da:b4:96:e3:d2:29:99:9f:f3:e5:02:07:3f:de:
f6:3b:92:8e:71:49:d7:e1:f3:c1:2d:10:0a:39:34:de:f4:4b:
f2:3e:cd:a9:b3:2d:0c:35:e1:b2:45:dc:9d:c4:87:fc:3f:bb:
cd:6e:9c:de:ee:77:17:85:c6:02:56:0a:bd:d0:5a:e5:67:24:
b1:2c:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:38 2025 by rpki-client