Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 2Jo2M80iDHTE2Cyf5uru2oYaP7ic1aKeA/+ULWHPT4Y=
Subject key identifier: 7F:6B:1C:C4:81:25:3F:B3:64:45:07:3B:34:F0:D9:A0:EA:73:20:23
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0198402B957CD35AD8294CC246FE24D375F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 06:00:54 +0000
Manifest this update: Fri 25 Jul 2025 06:00:54 +0000
Manifest next update: Sat 26 Jul 2025 06:00:54 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: ZEPek1+UVeBufOPu9/LHzkhkeHuPENupnmiweOZRqVc=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:95:7c:d3:5a:d8:29:4c:c2:46:fe:24:d3:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jul 25 06:00:54 2025 GMT
Not After : Jul 26 06:00:54 2025 GMT
Subject: CN=7f6b1cc481253fb36445073b34f0d9a0ea732023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:9b:26:d7:e9:80:83:b1:96:f4:27:58:a9:
04:81:b5:4f:8a:87:39:6e:b0:7c:09:d7:96:2d:f5:
e0:99:b0:c0:01:09:74:53:85:24:06:58:50:b1:39:
ba:d7:5e:19:ec:95:0e:5c:7e:50:95:58:02:de:82:
b2:a6:dd:f8:a6:50:35:b7:7c:c8:1b:49:04:53:20:
22:83:7f:d9:6d:17:d5:d1:1f:62:2d:3a:29:ec:1c:
33:54:5a:a1:31:b1:8e:e8:86:f2:b6:2a:dc:f2:3b:
b2:68:b6:93:8f:4a:c4:a6:6b:2c:57:e4:44:96:22:
b8:8c:49:b3:51:e2:50:11:7f:fc:76:5e:ea:ef:01:
29:15:3f:f4:cb:77:44:65:52:17:48:9d:18:6f:7b:
e6:fc:f8:6a:50:08:6f:12:c6:70:89:8c:40:55:4a:
74:97:6e:b7:78:1b:11:89:54:6e:f8:26:78:54:1a:
fd:2e:50:54:f8:16:b1:62:cb:97:a6:26:b4:94:8c:
19:32:77:6d:c3:fd:79:63:43:1f:aa:f6:9e:aa:25:
43:83:5f:c4:2e:f7:e5:e0:40:9c:e2:f4:05:04:20:
99:a0:04:e9:eb:02:08:41:55:a8:a2:c2:3f:5e:ad:
82:a4:7e:c9:98:27:53:de:58:3e:63:e1:5a:9b:f6:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:1C:C4:81:25:3F:B3:64:45:07:3B:34:F0:D9:A0:EA:73:20:23
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:49:52:f5:ea:28:79:5f:0a:65:32:c1:72:99:cd:21:e1:
dd:19:96:0f:6d:6f:53:a3:01:02:90:1e:fd:91:ab:1d:46:95:
ce:b5:6f:5a:3a:b2:6f:92:f8:7c:d2:51:55:11:a2:6e:3c:29:
c0:f3:47:8e:6f:55:0b:21:24:a4:b6:82:64:57:b0:dc:b9:42:
d2:a3:7a:03:8e:45:bc:d0:c9:ab:1d:58:b9:02:1e:e9:4f:28:
8b:88:22:86:82:e8:9e:90:85:16:c5:94:9b:82:d7:ef:91:7c:
e4:64:15:79:15:2b:fc:d5:4e:b6:cd:5f:9a:5d:94:ef:9b:52:
6b:e9:b6:69:66:44:8d:ac:4a:da:7f:d4:7c:d6:31:e8:1f:3e:
8f:de:6b:d4:c9:2a:5c:01:7a:25:19:43:5f:b4:22:7c:e0:f1:
bf:fa:17:82:56:4e:d7:64:61:4f:10:4c:e6:53:28:81:6d:0b:
1d:47:af:2a:73:43:81:de:3a:60:0a:28:cf:c0:de:45:d1:e0:
1d:1e:7c:76:b5:30:ee:21:03:30:89:fe:8c:9f:d9:cf:41:a9:
04:93:1b:41:9d:1f:75:47:25:26:4a:8c:01:fd:f2:a9:e6:17:
b3:69:80:f9:43:90:f3:b8:6f:cb:aa:ce:31:f8:c7:95:dd:04:
dd:c5:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:40 2025 by rpki-client