Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: tyg+ONMvpgMLyQZaCUyY0NGbpzapSGeUc/0O9NY9d3k=
Subject key identifier: 43:EE:39:46:15:0D:64:74:3E:32:8D:CE:FC:B1:92:D4:F9:12:D7:D6
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 019849D311CAA6D8D9EEC547AA870005239B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 014D
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: N2Sl8AmKGPLJ3TkRQ47I/vGTwztBs6W9odxb5emFUS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:11:ca:a6:d8:d9:ee:c5:47:aa:87:00:05:23:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=43ee3946150d64743e328dcefcb192d4f912d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:8d:04:f6:0d:13:6c:2c:b1:ac:25:18:a9:
e8:e8:dc:42:cb:e5:3c:2d:89:b6:fd:82:a6:2d:2a:
6e:fa:ae:f1:10:4e:70:02:a3:71:10:87:c3:99:3c:
40:9d:e6:e5:db:83:1c:53:29:85:b1:9a:18:dc:35:
ea:f6:af:3e:8c:d2:96:d2:ea:2f:ed:2b:c0:42:6c:
57:bb:85:a2:f6:71:82:d5:a9:fb:e2:74:b0:a4:cc:
3e:dd:94:d8:59:4c:26:2c:36:ab:1d:5d:e6:08:22:
38:a0:5a:29:d9:94:8e:2f:96:18:4a:53:d7:ce:88:
35:ed:7e:3a:d1:20:98:d4:4a:85:c4:36:0f:09:97:
59:f8:f2:4c:dc:53:13:37:79:34:f3:5f:8d:a5:0b:
cd:8c:00:e0:af:e9:32:7e:bc:a6:c3:8d:a9:b7:e1:
cc:ca:86:03:b6:86:cc:d7:cb:b1:d7:96:37:4c:11:
29:56:f2:52:72:1e:58:55:bb:7a:72:1d:f6:92:d2:
28:6b:d9:05:9f:3b:77:8b:0a:4c:bf:52:70:cf:9b:
28:9f:ec:98:84:29:bf:1b:4c:c4:4e:62:72:eb:89:
69:16:1c:a8:fb:1f:b0:aa:9e:9a:fb:3a:22:91:01:
5f:f7:d3:6e:07:ca:28:6c:bd:e5:fb:5b:bd:18:bf:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:39:46:15:0D:64:74:3E:32:8D:CE:FC:B1:92:D4:F9:12:D7:D6
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:13:cb:13:f5:24:50:3a:f7:f9:fe:f4:38:eb:d5:7a:39:5b:
75:6c:ac:3b:a7:71:c2:3f:e3:99:e2:ed:ca:98:94:50:5b:f1:
db:6b:79:7e:cf:a1:fb:6f:10:74:f4:09:4f:e2:2e:a0:f4:b1:
7d:9b:18:0e:7b:e7:20:61:6a:e9:bb:c0:d5:55:4b:1c:06:96:
13:8c:ab:84:dd:6c:ab:2b:a5:e6:f0:f6:fa:5d:50:f0:8c:7f:
70:5d:e9:af:3a:e4:24:58:b7:fa:9d:c6:14:05:3f:94:fe:51:
6c:75:0a:98:07:b8:d2:18:21:98:50:61:4c:76:a6:2d:ce:11:
3f:67:bf:23:5b:2f:36:a2:89:a1:77:c7:2f:2f:62:f0:ae:de:
bd:33:54:6d:f9:57:bd:14:f5:43:e7:31:16:d8:55:83:0b:6b:
a1:6b:b7:33:83:85:5f:40:d7:ed:7c:95:14:b0:75:58:58:ea:
05:f2:dd:6a:5d:1c:52:9a:56:84:12:8e:f0:ad:4e:79:c9:c3:
1f:d6:35:69:74:a1:e2:d0:3d:49:74:18:2f:01:3b:b2:db:e9:
84:7f:ca:95:bb:ea:77:08:2c:4c:9c:44:7b:72:d6:db:2a:b1:
dd:65:a5:a6:6f:50:52:7e:88:27:ae:77:e8:b9:27:83:0c:75:
0d:26:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:05:06 2025 by rpki-client