Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: ONdOkTMAZ+PnXiOJU7DQKEE6jn8cr5dPTJfJl/3IaYU=
Subject key identifier: 68:A0:4A:BF:B8:47:79:ED:43:89:C3:DF:B7:3D:81:D8:DD:6F:90:80
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 0198481BF9D868BDA699D85EBDC2B766E7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0CBF
Signing time: Sat 26 Jul 2025 19:00:49 +0000
Manifest this update: Sat 26 Jul 2025 19:00:49 +0000
Manifest next update: Sun 27 Jul 2025 19:00:49 +0000
Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: H5t7Vd05k2msnnABZlZx6AK1OlJ9+f/lrygoF2RhoKs=)
2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f9:d8:68:bd:a6:99:d8:5e:bd:c2:b7:66:e7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Jul 26 19:00:49 2025 GMT
Not After : Jul 27 19:00:49 2025 GMT
Subject: CN=68a04abfb84779ed4389c3dfb73d81d8dd6f9080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:ef:7a:dc:29:21:57:e7:0e:df:21:b9:90:
bf:7b:03:63:21:0c:b2:37:f0:83:67:71:6f:cc:5d:
8b:bc:30:5c:fa:6f:82:4b:6a:3e:d4:b8:52:fe:04:
3f:4f:b1:fe:64:c8:fb:e3:5b:64:ce:18:2d:da:a5:
50:9d:4f:d6:4f:1b:c1:9a:b0:0a:e2:7c:ea:8d:6d:
fb:00:0d:a6:1a:60:bf:5f:66:1c:c3:dd:1c:e5:e3:
7c:92:69:9a:ec:87:70:21:b1:12:dc:12:e8:5d:d6:
16:45:21:fe:ae:11:ca:3c:fb:02:38:92:ff:e5:cb:
1c:cd:db:ed:52:20:d7:e5:40:68:41:50:e5:4a:ba:
ea:3b:5a:71:f7:4a:3f:e9:b3:4e:fd:6e:9c:75:16:
ba:02:e1:63:b2:aa:59:32:91:aa:42:f2:bf:0b:c9:
c9:78:06:1c:39:a6:91:6f:73:0d:20:1f:19:07:5e:
19:35:08:24:d9:ab:c5:fe:bb:2f:f7:a1:28:79:eb:
e3:e9:3b:50:b1:19:d6:13:8f:14:91:46:05:dd:5f:
fb:6b:dc:b7:5e:68:3a:df:7c:6d:58:3f:d5:51:9d:
98:68:df:42:49:af:ca:43:c2:74:01:aa:d7:ab:32:
0d:c9:7e:f7:ab:ad:2d:4a:37:55:09:e7:b0:11:4d:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:4A:BF:B8:47:79:ED:43:89:C3:DF:B7:3D:81:D8:DD:6F:90:80
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:fa:ac:c9:7e:cb:e5:6f:c5:4b:1f:e4:ef:40:2c:f6:ac:
49:8c:dc:8e:56:fe:39:e7:eb:2e:bc:d6:45:98:c4:76:aa:b6:
ed:15:53:3c:13:c2:d1:6b:9c:ae:10:0f:0d:ba:c7:ec:d7:1d:
09:66:11:65:ef:93:54:07:09:b4:86:a4:4c:fa:ad:cd:62:72:
a3:31:4c:72:2c:3c:12:c8:c1:b2:c2:19:97:46:7b:80:68:bb:
1e:6d:bd:d1:58:32:40:6a:de:91:d7:f9:1b:c9:f1:de:f0:c4:
a4:a8:20:3f:7c:01:ff:c6:fc:71:53:dd:90:79:42:8f:81:77:
15:ed:35:e1:54:d6:35:72:a6:6e:3c:83:cf:10:90:0d:44:94:
9e:a6:e1:1d:33:42:82:7b:21:e4:51:5c:80:8d:33:b4:94:69:
7e:56:e1:7f:45:40:91:ec:b9:b7:23:3e:b6:09:43:43:c7:2a:
5f:05:b3:64:b0:d9:91:8c:ce:b9:f1:c8:8c:a7:88:19:3b:3c:
6a:87:a3:10:ea:57:13:27:f2:6a:e4:a4:7c:4e:f1:b6:79:3d:
e5:f8:04:02:30:cf:e9:c6:b9:a8:0e:c5:0b:d1:7f:ff:86:1c:
55:16:7f:5c:37:54:44:c3:6c:84:ff:9d:cf:68:81:1e:fd:d8:
25:bc:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:44:52 2025 by rpki-client