Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: Jycivt6z8q56KFYll+wey4uPn82W2EayAfe/Xlt71HE=
Subject key identifier: 5E:3E:1F:A0:97:14:32:57:D6:84:A6:5E:A6:C6:D3:6F:A1:4F:70:6E
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 019853B1D9517B04D8834C8DEF11A4A00BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0E8A
Signing time: Tue 29 Jul 2025 01:00:20 +0000
Manifest this update: Tue 29 Jul 2025 01:00:20 +0000
Manifest next update: Wed 30 Jul 2025 01:00:20 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: MmFyC0e3Rww27fE5bChpxJ97q+/ZVKo5Y+2wQhZdKnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:d9:51:7b:04:d8:83:4c:8d:ef:11:a4:a0:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Jul 29 01:00:20 2025 GMT
Not After : Jul 30 01:00:20 2025 GMT
Subject: CN=5e3e1fa097143257d684a65ea6c6d36fa14f706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:ef:c4:e8:b3:2b:bf:df:39:21:1a:ce:82:
54:76:93:ad:65:aa:a4:c0:66:40:0c:ef:70:c8:af:
14:ed:e5:4f:73:40:ad:c2:84:6c:f4:eb:34:be:7e:
ed:20:ca:c8:22:e8:a6:ed:3d:1e:5f:b9:c6:24:4c:
79:11:37:0c:31:61:c1:c8:06:ba:52:2b:49:83:5c:
09:26:5f:41:57:30:62:3b:15:40:26:d0:15:86:e1:
33:2f:c1:a7:1e:12:a7:0f:c3:0a:ad:bd:ea:7a:44:
b0:93:5b:4c:21:90:01:84:1f:c2:84:2b:99:79:a4:
59:5a:ff:14:83:c9:4e:00:6d:f3:80:d4:d7:5e:b1:
5f:75:9d:52:85:4b:c9:38:b2:b1:69:f9:a2:d0:a8:
8e:f1:d5:7b:df:4b:60:73:23:28:a9:60:26:69:22:
da:52:a6:7a:70:57:36:c3:60:22:cc:38:30:4a:5c:
8c:e2:68:46:0e:51:b0:8b:56:d0:14:63:d9:ac:29:
70:1d:50:1a:41:dd:ae:fd:6c:18:76:af:d1:2b:23:
63:b5:5a:a3:0c:b5:ec:85:04:1b:d1:f5:88:b0:3e:
f4:8e:02:ad:17:e4:d4:b7:3a:3a:00:13:59:54:93:
05:ec:4c:91:01:57:c3:9e:80:13:96:65:97:22:5a:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:1F:A0:97:14:32:57:D6:84:A6:5E:A6:C6:D3:6F:A1:4F:70:6E
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:e2:bd:fb:34:37:74:b4:c2:f2:85:15:bb:d5:e7:69:59:
d5:5c:16:e7:8d:b6:2c:10:69:5c:07:d4:72:ab:fa:a6:fa:43:
a1:c6:aa:59:c4:2a:df:51:bd:56:ca:42:48:9e:6f:66:e7:8b:
67:f6:54:d7:fc:61:53:e6:bd:13:5c:15:10:ef:8d:ed:a2:0f:
c0:70:d3:80:80:bf:33:32:15:ec:76:ef:fe:d0:37:8b:6c:76:
14:fa:f3:23:85:f2:a2:fc:38:1b:b1:01:66:07:85:6c:61:30:
72:ec:6f:a4:79:fb:df:20:12:6f:5d:f9:fe:42:c6:7f:3a:83:
24:70:30:07:19:78:b8:85:d0:dd:1f:5d:d8:96:86:5d:5f:35:
de:ab:1b:48:14:34:03:12:47:58:42:bc:3b:2a:c8:5d:90:25:
ad:1f:8a:bf:cd:f9:7f:81:a2:32:f7:0c:87:6d:2f:74:29:ce:
f1:2f:9b:01:c0:06:c1:19:d0:69:96:16:fc:80:23:2c:7c:23:
d1:d6:2c:f7:3f:ed:d1:89:2f:de:dc:91:e0:a4:e3:1b:59:8c:
e9:16:6c:d9:79:b1:df:4c:3a:b5:f0:d0:f4:79:16:54:d2:cc:
81:fa:13:59:0f:ef:8a:0d:52:6f:80:c9:ef:e4:8d:0f:0b:9e:
7a:f9:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:29 2025 by rpki-client