Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: 4NEPb1gKzYDs+i+1GEJ2Tobift/Wk1A91YVkZkju9KU=
Subject key identifier: 8B:8B:7B:83:C1:34:C9:6F:F9:AA:8F:F9:91:04:54:D8:8D:8A:6D:14
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01983E3D0D470AB623F00F6C862C1429EFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0732
Signing time: Thu 24 Jul 2025 21:00:45 +0000
Manifest this update: Thu 24 Jul 2025 21:00:45 +0000
Manifest next update: Fri 25 Jul 2025 21:00:45 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: mM8huFnaWlCwmhoBcBAuClUsmXCxy7Okjkshild2x7k=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:0d:47:0a:b6:23:f0:0f:6c:86:2c:14:29:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jul 24 21:00:45 2025 GMT
Not After : Jul 25 21:00:45 2025 GMT
Subject: CN=8b8b7b83c134c96ff9aa8ff9910454d88d8a6d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:4d:88:e8:57:8d:2e:54:4f:62:01:44:12:
9d:32:92:d9:ba:73:ae:02:5e:8b:5d:53:b3:36:7a:
b2:27:81:c7:28:18:27:79:12:83:82:eb:5a:56:4f:
b7:f0:b2:69:63:62:35:b5:32:71:03:43:b5:66:26:
1a:d8:b8:be:07:37:32:40:62:71:68:29:16:f2:7c:
73:b7:e7:5f:7c:87:6a:62:1d:56:cf:96:d4:b1:81:
6f:b0:7f:8a:ee:31:83:76:50:d5:a2:27:3d:9c:87:
f5:16:f1:6c:9f:6c:e1:ac:4a:4f:8e:fb:ec:42:cf:
e0:62:4a:3a:d5:a5:73:e0:67:a7:a1:00:09:fd:47:
41:d1:f4:69:30:e5:d4:98:c4:8f:b6:73:32:8a:8c:
02:99:da:14:f1:ba:c3:aa:0f:35:9a:d3:f4:77:bb:
bc:82:9b:16:c8:3f:79:88:a9:84:9f:2a:94:66:82:
74:ba:24:a6:47:52:88:52:2c:31:e2:8a:1b:53:33:
c7:e5:a2:fb:ef:03:66:ad:a3:25:28:6d:77:07:73:
5a:7c:1f:b4:fb:8a:89:1a:32:f1:9f:e2:a7:43:32:
70:59:4c:e9:b9:bf:d1:ae:bc:ca:20:38:df:5c:f7:
4a:6c:a9:b1:a5:97:d5:3b:d4:4d:b3:5a:8e:69:6c:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:7B:83:C1:34:C9:6F:F9:AA:8F:F9:91:04:54:D8:8D:8A:6D:14
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:10:b4:88:b1:1f:cd:7a:ea:c8:97:a0:f4:07:d1:1c:c4:
b3:c2:6a:69:89:e9:9f:42:59:4e:11:d8:27:aa:78:28:77:ae:
70:ef:b3:b2:b7:8c:64:75:65:a1:13:f8:91:66:89:01:1f:25:
bd:cd:94:ab:4a:2d:f6:84:b5:a4:7c:21:21:7d:61:27:17:e0:
2f:4b:b9:e7:98:f6:e7:94:aa:c6:e7:b1:81:7f:cc:7a:05:4e:
3c:43:f9:fe:de:9c:57:e4:4c:05:ea:87:cc:9c:30:91:a4:2c:
84:fc:96:aa:29:5a:dd:33:28:e4:fb:fd:02:75:e3:cb:c1:cb:
77:0e:97:cf:10:4d:e8:71:f3:3b:86:0d:67:5a:3f:76:4e:97:
4b:3d:76:5c:41:31:4d:d7:7f:41:9a:06:48:cb:89:7b:28:c0:
06:4d:5a:cc:0f:ad:c3:0b:d5:b0:9e:59:1e:99:71:60:25:b0:
b3:0b:df:11:09:5f:37:b2:65:02:e1:97:7e:65:ec:26:38:a9:
53:12:80:c5:63:b5:af:d1:69:3d:cc:10:3d:db:4f:28:c8:b1:
a1:fc:e8:98:0c:f5:5a:f1:76:52:dc:f5:33:0a:52:3e:54:8f:
58:97:ca:80:18:37:46:c3:4c:30:f7:d0:96:41:5f:0c:05:ca:
64:40:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:01:15 2025 by rpki-client