Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: GFkmYeuK+E7F7fpbQQU+I0htZteoP7nfxEwfrjCZkNI=
Subject key identifier: 5E:48:FE:BE:27:9E:1D:C9:9C:CA:92:74:63:09:10:B4:95:77:86:76
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 019842506D952DD3076A4C50DE1F0FDE6A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 12E5
Signing time: Fri 25 Jul 2025 16:00:23 +0000
Manifest this update: Fri 25 Jul 2025 16:00:23 +0000
Manifest next update: Sat 26 Jul 2025 16:00:23 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: 7xV2R/cByzOVBDJBDA4CfOTeVLPS61CiAKr/04kLz1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:6d:95:2d:d3:07:6a:4c:50:de:1f:0f:de:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Jul 25 16:00:23 2025 GMT
Not After : Jul 26 16:00:23 2025 GMT
Subject: CN=5e48febe279e1dc99cca9274630910b495778676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:d0:57:8b:a4:87:b1:54:92:62:29:3e:2b:
e9:27:47:d8:f4:18:70:5e:6a:68:e0:62:da:93:68:
16:32:c3:5f:2a:8c:43:9b:2d:51:7a:51:95:6e:15:
b6:d3:f5:63:b4:fd:83:7e:1b:ff:58:57:7e:b8:91:
fa:a4:57:b7:29:3f:6f:3b:fe:7f:8e:9c:f9:ba:00:
ab:5b:f7:a7:e1:08:2c:ed:cc:33:20:2f:3e:33:c2:
af:2c:51:77:00:4b:b9:8f:c7:b1:f1:e4:33:c3:f7:
ec:49:c2:bf:d2:52:9b:a7:4f:56:b4:72:19:03:37:
1d:19:08:44:1e:4d:20:a5:8b:bf:c2:b2:24:e0:d7:
f0:f2:aa:c3:21:6a:b4:b2:ea:ce:dd:af:84:fd:65:
8b:ee:a2:aa:96:2a:5d:32:dc:d2:24:fa:df:c0:7c:
39:64:d6:47:54:af:e5:3e:7f:55:b5:e6:e3:80:cf:
e7:c9:da:b5:f1:2f:86:86:de:c6:d5:2d:c3:87:c1:
c4:13:c2:7a:8a:44:2b:c9:82:3c:2c:61:99:de:93:
70:30:00:a0:d8:b3:dc:85:65:12:40:37:45:95:f3:
91:52:3e:58:3e:b1:ae:9f:cc:e9:11:70:0a:e1:9b:
02:c4:21:3f:1b:49:47:1d:d0:be:1e:80:0b:f0:15:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:FE:BE:27:9E:1D:C9:9C:CA:92:74:63:09:10:B4:95:77:86:76
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ba:7b:49:de:97:48:ac:98:7a:b3:01:7e:77:d4:8e:15:1a:
ef:17:0a:89:c0:e4:f8:29:e6:1c:10:e3:15:c3:57:c2:b7:f1:
cb:7d:f2:3e:ee:18:08:58:c5:12:9e:14:4d:8a:d2:9a:85:44:
a9:13:a9:de:b2:51:75:72:69:25:5b:9e:be:41:95:22:97:eb:
4e:91:b1:84:25:46:9e:b8:03:e0:82:38:69:e8:eb:27:a4:52:
bc:38:05:a1:d7:de:ee:c2:60:a1:83:48:c5:ae:a8:96:55:20:
83:99:54:bb:7f:f5:d9:b1:e6:d8:31:0f:9e:58:a2:43:d0:46:
61:e4:37:2f:08:50:47:3a:11:8e:3e:d0:ab:aa:a1:d1:56:70:
3e:95:78:fc:b5:2f:fd:08:2f:b8:94:1a:cd:ae:7d:a0:4e:79:
72:c8:87:c3:0e:58:0b:b6:1d:c0:97:0f:fd:55:5f:09:34:25:
d6:7e:33:cf:7d:32:fc:b1:77:32:13:54:2b:47:13:42:9d:59:
ef:ae:95:bd:4e:5a:24:20:96:cf:c5:9c:19:8d:f0:ab:e9:69:
80:76:48:66:70:3b:48:83:3a:00:25:be:69:7a:45:d3:d8:ba:
7d:b1:c3:63:83:64:c9:2d:06:8c:53:38:be:9e:1f:7b:fb:2d:
fd:14:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:07 2025 by rpki-client