Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: kmlBiX5nGuCYXFVkcXKrVw8oU09hh1rOxox5l1SdMiU=
Subject key identifier: 59:7B:EC:A7:DE:7B:A7:E3:90:5C:8B:8C:27:6B:93:91:20:71:2A:3A
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 0198488936B908B3EDBAFBB64B1C5E74B883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 02E4
Signing time: Sat 26 Jul 2025 21:00:08 +0000
Manifest this update: Sat 26 Jul 2025 21:00:08 +0000
Manifest next update: Sun 27 Jul 2025 21:00:08 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: MCRZn+pR/F+0eu/vNkWHz3T/uaz3aB9Pw0JwiO6IlnY=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:36:b9:08:b3:ed:ba:fb:b6:4b:1c:5e:74:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Jul 26 21:00:08 2025 GMT
Not After : Jul 27 21:00:08 2025 GMT
Subject: CN=597beca7de7ba7e3905c8b8c276b939120712a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:4c:ee:7a:f7:cd:39:16:37:73:8b:2b:27:
3b:d2:bc:11:f1:e0:c0:af:d8:14:d7:b6:e2:bc:01:
a5:6a:52:7c:c5:2d:c5:15:e8:ae:b1:dd:de:d6:d4:
06:84:64:ad:93:0d:99:f3:8b:93:6f:3e:04:4b:ab:
4e:c6:58:11:4e:9f:8c:ef:6a:dd:57:d5:40:71:e1:
30:d7:70:87:b3:70:a0:ba:fe:81:a9:14:8a:4b:1b:
3b:3c:6e:13:d3:19:ec:5f:e3:f7:a5:b8:26:17:04:
be:96:5d:a5:2a:2d:2a:f0:43:fe:a3:63:84:73:37:
2d:cd:3b:53:78:ce:e6:e7:c9:21:c6:37:d0:9d:9d:
fe:e3:19:54:bb:59:d2:20:5e:43:c3:40:89:83:0c:
9a:60:b8:ed:56:c2:a3:f0:c5:4e:60:3f:a1:36:51:
da:da:58:ac:ec:90:2b:0c:d2:d0:6d:1f:f8:79:e2:
7e:01:db:76:b6:65:f1:3f:e1:f7:8b:be:7b:62:39:
7f:ee:6b:76:c4:16:72:00:d0:12:61:d4:9a:7d:e3:
08:14:bf:00:c2:e8:45:5d:d7:07:f4:f1:48:9e:d2:
7c:a6:48:4f:0e:60:cc:a0:57:78:36:37:61:d7:17:
37:da:71:29:08:33:6a:36:ce:e6:91:56:86:56:ef:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:EC:A7:DE:7B:A7:E3:90:5C:8B:8C:27:6B:93:91:20:71:2A:3A
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:43:31:44:f6:85:63:ca:26:d2:40:24:92:c2:8a:c3:88:70:
90:7d:f1:fa:e6:2a:a5:2a:c9:63:67:e8:42:2a:d5:c1:30:ef:
ad:c3:74:44:a0:9d:1e:6f:fd:b1:d6:09:8c:82:12:37:6f:93:
a9:42:cb:c6:90:4a:2b:2c:36:aa:f3:14:ef:77:01:15:33:17:
e8:e6:8a:eb:84:17:e7:8d:34:6d:87:c7:db:36:c5:8c:45:a1:
7f:42:07:61:01:c4:a9:85:84:fc:71:01:2a:b8:42:46:57:88:
a7:92:2c:a5:23:db:ba:c4:a3:19:a0:b0:8e:19:48:4b:68:e5:
d7:28:0b:53:5b:eb:8a:69:60:c0:47:5e:71:dd:48:1d:08:37:
1d:0d:b8:77:ea:c4:40:c8:2f:16:10:73:6d:1c:6c:42:04:4d:
03:0d:fd:ca:82:e1:fc:07:61:d0:79:60:b4:fb:82:24:d4:22:
4a:f2:2d:36:d3:ec:cd:3d:cc:6e:d9:50:66:21:1b:79:c0:ed:
35:eb:da:dd:97:5a:0f:f9:c0:48:d1:df:2e:3f:f6:b5:5c:61:
fb:7e:53:b9:c5:ce:a4:1e:06:52:4b:7c:82:b5:85:cc:2c:59:
b2:d1:fa:60:28:c5:d1:c6:3d:a3:ed:92:7f:f9:d3:b6:4f:30:
11:be:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:48:58 2025 by rpki-client