Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: FWkqQVz66Wk6ERA4wbuI9VwadjhfxY/JSR3+EvbTT8k=
Subject key identifier: F1:D0:E7:4A:BF:59:C1:D5:21:43:83:A4:8B:92:0F:BB:EF:15:E3:37
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 01984B53E998D14C99617BA4D16C85D87BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 1142
Signing time: Sun 27 Jul 2025 10:00:47 +0000
Manifest this update: Sun 27 Jul 2025 10:00:47 +0000
Manifest next update: Mon 28 Jul 2025 10:00:47 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: WU0fDeLtkuWqTaMfUvAtH0GSMLqTaJv+yOsuwj6zL/Y=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:e9:98:d1:4c:99:61:7b:a4:d1:6c:85:d8:7b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jul 27 10:00:47 2025 GMT
Not After : Jul 28 10:00:47 2025 GMT
Subject: CN=f1d0e74abf59c1d5214383a48b920fbbef15e337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:14:d8:3b:9b:62:a4:6a:8a:5b:aa:0f:2d:
34:b5:0c:7c:94:0c:08:64:3b:dc:a8:82:11:07:47:
8e:cd:a4:88:b1:f6:1f:94:5a:97:d0:9d:cf:53:5d:
f4:84:1e:41:27:12:7a:94:ea:da:8c:3f:09:52:d6:
34:4a:7d:cc:49:99:db:4a:55:80:aa:98:50:bb:3d:
e2:ca:60:e5:b8:f2:16:b9:b2:82:1c:e9:d3:cd:49:
31:75:d2:a1:b9:84:e9:f5:62:5d:98:ad:ff:59:a9:
7d:40:0b:ae:ae:99:92:76:7e:5f:cd:09:e5:dd:1a:
f5:d9:24:76:c9:98:10:94:f7:a4:39:e0:1b:65:c8:
21:2f:c9:14:ee:82:7c:61:94:2e:75:78:9a:43:b6:
5e:89:c7:58:2a:6f:ad:ab:55:90:5f:6e:86:df:63:
7c:8c:28:1c:ed:4e:c9:43:3f:40:3a:48:8e:e1:ce:
14:2e:01:e6:2f:d8:92:42:8a:d5:cc:df:3b:31:18:
60:46:f9:2a:a9:f7:78:0e:f6:db:a6:8b:09:ec:c3:
db:fa:a4:9d:e9:a0:be:68:c5:b9:03:31:c2:76:dc:
23:3f:1e:26:e2:d8:c5:8a:2a:1f:9f:86:e6:59:9d:
b4:2f:bd:d0:ca:87:2e:c3:5f:39:4d:02:b3:4c:71:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:E7:4A:BF:59:C1:D5:21:43:83:A4:8B:92:0F:BB:EF:15:E3:37
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:32:d6:8e:d5:a5:1c:97:8b:a8:ca:e2:af:77:0a:7f:1f:cc:
8d:b0:1a:c2:43:dc:8d:36:ab:2e:96:ef:ff:d3:39:26:e3:dd:
30:1f:19:8e:55:cb:bb:cd:d7:7d:b9:b7:4a:97:43:97:e1:fb:
41:1b:ca:73:fe:20:4d:20:ed:88:12:88:86:d7:99:01:db:f8:
01:5a:63:b2:b4:0b:52:12:6f:4c:c4:53:19:63:aa:b1:cf:e8:
66:9d:68:ed:09:dc:a7:d6:39:99:8e:ed:7a:f4:ee:cf:38:20:
a7:f5:b8:99:1b:2b:b3:8f:6b:35:91:cd:9c:73:a1:88:9e:96:
df:19:f1:5f:83:6f:ad:a9:5c:3b:8e:5d:b7:3d:9c:b7:9f:42:
17:8b:2f:5c:66:d2:43:26:9a:34:fd:15:60:60:49:eb:06:75:
78:e4:f7:6d:76:93:f4:50:7b:b4:17:e3:d3:ad:ca:97:a5:81:
9d:23:ba:fa:49:8c:be:c3:47:da:ac:a5:c9:a3:3e:36:e2:35:
c6:d0:47:09:d5:0a:92:4e:f2:24:6a:07:5e:af:72:be:31:e3:
70:26:5f:49:9d:9d:f9:47:38:f0:45:27:9a:6a:22:ea:c3:c6:
86:6d:be:c2:5b:da:47:6f:57:18:88:b5:ba:99:bd:42:a2:96:
ee:d8:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:50:46 2025 by rpki-client