Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: BQi+Dz0tRyTHtA+tnC60WV2FjBffmClwPgYzUu9pdMU=
Subject key identifier: F8:A8:3E:4A:D8:3F:25:88:98:A9:BC:60:43:A3:22:E3:A0:83:6A:60
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 019845F6C59FAA03F6973A613883C4F2E813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 0220
Signing time: Sat 26 Jul 2025 09:00:57 +0000
Manifest this update: Sat 26 Jul 2025 09:00:57 +0000
Manifest next update: Sun 27 Jul 2025 09:00:57 +0000
Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=)
2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: WSTUoX+WlpjgujoM/0QLoSMdQg7Ho5xx/dVWDS9uccE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:c5:9f:aa:03:f6:97:3a:61:38:83:c4:f2:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Jul 26 09:00:57 2025 GMT
Not After : Jul 27 09:00:57 2025 GMT
Subject: CN=f8a83e4ad83f258898a9bc6043a322e3a0836a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:40:80:8e:10:e6:04:3b:a1:01:a2:d7:b3:
09:ca:a6:9d:a3:07:18:c4:72:9e:b0:b8:ad:c9:93:
32:2e:04:18:26:52:26:0f:48:6a:83:74:a8:2f:a3:
b1:2a:a4:98:fc:4a:e4:bd:b1:9d:c1:5b:f4:90:a5:
14:22:88:b8:0a:64:f4:77:68:0d:fd:52:34:87:59:
fb:66:0f:f4:06:58:6f:c7:0c:1b:b8:09:93:53:c8:
4c:e8:73:cc:a3:d5:03:9f:29:58:6c:a9:6e:bf:41:
25:c7:7c:64:20:1b:48:3d:31:a0:90:df:0b:29:16:
7c:1b:c8:b0:3a:ce:f7:1b:e4:25:6d:ee:c1:80:55:
f6:3d:3e:46:2d:63:13:d5:a6:9c:15:ea:af:c9:9d:
a0:0c:5a:35:fe:7d:68:b4:05:e2:cb:b8:36:79:1a:
87:7c:c1:7a:90:ac:e8:ce:8b:4d:16:03:1f:91:10:
eb:90:72:ba:ec:04:db:cd:c8:0b:6a:91:55:c1:e0:
ff:66:31:6b:7a:3f:41:c6:51:75:8e:31:6b:19:98:
8c:31:92:10:c5:a8:d0:61:a9:7e:a4:86:18:1f:c7:
1b:d7:0a:11:44:10:5f:c0:50:c1:8c:16:33:1d:50:
ae:81:dc:6d:a2:b9:ee:dc:f8:fb:09:28:c5:d9:9e:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A8:3E:4A:D8:3F:25:88:98:A9:BC:60:43:A3:22:E3:A0:83:6A:60
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:ca:41:36:58:83:b5:d7:24:b6:0d:83:2a:61:7e:27:3d:
63:8e:78:43:71:26:10:95:21:5a:d9:26:83:48:14:79:9d:78:
09:3c:30:74:1c:86:3d:ff:e0:1d:ab:ad:64:f0:4b:cf:8c:37:
c5:9f:48:a5:47:ca:f6:c5:55:d2:fd:bc:18:96:ce:69:b5:d3:
f9:52:71:82:03:7b:a3:18:2e:ce:42:66:e8:93:cb:9b:a8:c9:
4e:88:17:cf:8c:eb:97:48:f4:fb:04:12:13:19:3f:0f:08:22:
39:5e:40:72:59:27:20:f5:ba:7d:fb:20:6f:55:cc:e9:9e:3c:
db:a2:4d:50:f1:79:6d:5c:87:62:80:6c:a1:33:9d:a4:57:a5:
37:ce:e8:91:71:b1:33:74:72:07:cf:31:8f:96:87:1a:97:38:
96:63:36:9b:a5:22:8a:09:7e:cf:af:57:d6:db:da:61:ca:66:
66:a6:cf:0d:24:24:9c:ca:ec:e1:c6:65:1c:90:cb:36:eb:06:
11:83:c0:31:6a:e5:68:04:fd:26:d0:39:7e:1d:62:0a:f3:e6:
c7:2e:c3:69:20:c5:c4:ea:ea:77:ae:78:75:28:19:8a:25:e3:
d7:89:8d:5f:ff:fa:d7:38:12:94:99:ff:a1:1b:8a:37:a4:c5:
c1:71:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:18:06 2025 by rpki-client