Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: igO9bV7BinYG9gnuncfVyQ03q4fZ2qwJRYyZPk9qLUw=
Subject key identifier: D6:A0:38:EF:73:98:56:92:7C:23:6E:A7:D0:57:E4:57:FD:54:16:1E
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019849664215F2B39C640998DB89418461DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 02CF
Signing time: Sun 27 Jul 2025 01:01:34 +0000
Manifest this update: Sun 27 Jul 2025 01:01:34 +0000
Manifest next update: Mon 28 Jul 2025 01:01:34 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: Wr2K1aubxEYTD0F7u9dzU4JkLGE9zshN7SaLdr8iX4I=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:42:15:f2:b3:9c:64:09:98:db:89:41:84:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jul 27 01:01:34 2025 GMT
Not After : Jul 28 01:01:34 2025 GMT
Subject: CN=d6a038ef739856927c236ea7d057e457fd54161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:b0:e8:89:a2:61:72:22:53:bd:3f:3c:77:
67:28:dd:ea:07:22:e1:c9:03:fa:8b:48:9e:50:26:
0c:b0:4c:68:91:54:46:d0:b7:9b:36:15:09:61:92:
ba:6a:db:07:69:97:40:58:cd:3e:01:1e:55:cc:d1:
7f:d1:4a:46:27:e2:e1:09:58:88:0f:42:f9:5e:d0:
eb:63:dd:b8:51:f8:f9:7d:aa:d7:f6:5d:ce:5b:12:
88:68:9d:f5:66:cf:b4:86:70:b2:70:6c:41:d8:74:
07:e2:88:60:fe:69:81:fb:90:b9:4d:75:3c:5d:ed:
3b:02:ef:ec:9f:8a:aa:6a:71:52:6d:18:95:e9:e5:
10:5f:b1:cc:fd:fb:99:e6:70:2b:b8:8f:ab:fd:14:
ea:75:e6:b4:d2:0e:c5:df:c4:5e:fd:e7:43:d2:1a:
bc:2f:9e:d3:00:a1:90:77:e6:cc:79:4d:79:c4:b8:
fc:5a:e5:66:3d:bb:53:41:0d:1c:02:08:82:bf:f4:
86:e1:29:6a:a2:83:ff:3b:a7:1c:af:aa:ce:c5:9f:
60:0a:bb:a6:50:3a:c9:38:5c:6e:08:fa:77:1c:9a:
5a:5b:1c:47:60:bd:f7:95:91:a7:86:f0:f3:9d:65:
02:17:1e:89:b6:a5:7e:21:f2:e3:35:8d:6b:5a:12:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:38:EF:73:98:56:92:7C:23:6E:A7:D0:57:E4:57:FD:54:16:1E
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:a1:95:d6:f3:a8:2b:70:bd:c4:ff:68:9f:9d:f5:65:0a:
8d:4b:8d:ac:5a:ef:1c:f8:40:4f:db:99:18:0e:62:a6:76:68:
46:18:45:0c:db:49:23:88:56:19:d6:4d:b2:b1:87:b7:c7:81:
c9:86:02:d4:6b:a8:df:17:26:ce:8a:39:51:b8:7c:9d:7c:95:
89:3e:d5:af:5b:41:2d:e7:06:ac:76:74:4e:f5:b9:2e:e9:d2:
71:b0:ef:66:36:67:48:1e:f8:97:ba:fc:51:68:09:a5:af:ec:
51:e0:43:2b:19:35:be:e7:93:53:5b:05:72:33:9d:ff:ee:e3:
6d:cb:ec:13:ac:ef:03:03:b7:71:c2:5c:f2:22:04:3f:12:ac:
f5:52:0b:d6:fe:e7:b6:71:2f:6e:96:ae:74:85:7f:3d:d7:43:
83:72:35:9c:c6:a5:de:18:ab:b1:3d:d8:bc:e0:de:f3:33:6c:
60:18:d3:21:b7:23:ea:92:39:de:5d:2a:50:58:a2:20:73:b4:
d6:37:e1:ee:20:ed:dc:25:95:cd:25:9e:63:13:98:72:5e:41:
86:2d:ba:07:51:90:7b:04:6a:87:96:78:b2:75:74:a1:64:e9:
b9:b4:9f:78:07:9f:c1:ab:90:13:be:03:e1:40:3e:22:75:df:
ce:c8:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:56 2025 by rpki-client