Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: LGClZdUYMLXho113ZexwQSe4S8nY3YpONiQqxH8iPKE=
Subject key identifier: FF:0A:13:BD:E0:0C:BB:18:F2:24:54:32:24:83:D5:D7:2A:ED:3F:42
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 01984A09FA2391F0C7A392AC1A70117E01D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 11E7
Signing time: Sun 27 Jul 2025 04:00:24 +0000
Manifest this update: Sun 27 Jul 2025 04:00:24 +0000
Manifest next update: Mon 28 Jul 2025 04:00:24 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: NYO+d7Bo7KhSKi/Mao/2BsW9wRmmtpF1PEzlhL1x3zs=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:fa:23:91:f0:c7:a3:92:ac:1a:70:11:7e:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jul 27 04:00:24 2025 GMT
Not After : Jul 28 04:00:24 2025 GMT
Subject: CN=ff0a13bde00cbb18f22454322483d5d72aed3f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:c7:80:59:8e:0b:c7:a5:60:21:fb:91:29:
fe:97:a6:ed:42:58:da:a7:7c:0d:e2:f7:da:bb:1b:
e0:e1:a2:c9:65:f5:b6:8e:6f:4b:00:7d:7c:4f:7d:
aa:1f:ff:95:b2:42:a8:2d:b1:88:e3:e3:bc:ef:dd:
aa:8d:3d:6f:94:b2:31:c1:a4:05:1a:4b:9e:2c:a7:
44:1a:ae:bb:b8:91:c3:8d:0f:5b:22:df:14:e2:92:
f7:3b:58:74:bd:dc:a1:7c:cb:a9:8d:e4:66:d7:52:
65:6b:83:e9:d4:73:e9:b9:e5:58:47:4e:72:0d:fe:
01:48:2f:58:ee:9d:1c:9a:2d:6d:f1:40:7d:78:10:
6d:ce:b3:57:d8:94:98:9c:2d:13:00:f3:7a:c8:3c:
aa:ce:b4:7d:d3:3d:3c:b8:e5:ca:74:aa:e9:d6:ca:
1b:43:62:85:22:e6:1c:c6:0b:b5:f9:07:3a:e2:74:
c8:e9:d6:c2:dc:80:96:01:d5:d1:f2:7d:a2:64:2a:
01:ad:05:47:e0:ac:ba:8f:85:80:03:08:cf:53:3c:
9e:71:69:de:e7:19:b4:77:39:20:a4:ad:16:9a:a8:
11:de:5b:7a:b7:92:38:36:36:f1:4b:c4:56:8a:99:
f2:eb:27:90:ab:21:46:26:c6:53:ac:5e:c3:98:af:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:13:BD:E0:0C:BB:18:F2:24:54:32:24:83:D5:D7:2A:ED:3F:42
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:4a:f9:ef:b3:9b:ea:03:ee:ac:37:21:aa:ae:29:db:63:
71:27:d1:18:5a:37:b6:e2:95:45:52:2f:84:0c:b9:f5:7e:fe:
ef:d4:aa:c0:63:2e:3a:e3:d4:f5:e9:c2:f8:38:61:be:80:c9:
97:5b:5a:0b:01:47:93:6b:05:47:a2:0a:13:cd:08:e6:22:b0:
82:2d:f6:c3:fc:e7:99:78:6a:3e:89:78:80:a2:72:db:49:0b:
9b:76:0b:1e:20:2c:ce:eb:a7:6e:8b:d0:aa:59:0b:42:49:80:
5d:50:aa:5f:67:78:50:69:92:a7:5c:d0:7f:80:ed:5a:37:0e:
34:18:30:b9:c6:28:c4:4e:0c:8d:f3:c6:88:2f:f4:13:02:80:
a9:98:48:a7:66:4c:95:e3:43:2f:ee:0f:e4:b4:5e:03:a5:1c:
72:65:bd:47:a1:9b:f2:43:31:1d:2e:08:6c:df:68:88:c4:41:
61:ba:36:b9:98:c3:52:7a:25:ad:2c:a2:db:a0:5a:1d:de:cc:
47:ab:20:60:7b:bb:f3:e1:3b:10:82:04:26:5b:92:cd:d0:57:
43:17:13:45:f3:cf:1e:48:0f:53:67:7d:5c:69:34:3c:ab:db:
7b:83:48:d8:78:9b:46:37:39:2c:29:5c:4b:2c:bb:f3:50:ab:
57:04:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:58 2025 by rpki-client