Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: QJzcUSsUFTlJn3zIbbvwEJr2xKvtr1UTdQ5Swn5X0ZU=
Subject key identifier: 8F:03:29:34:9B:4E:F6:81:21:35:D9:BF:A3:7C:3B:11:68:D5:7D:86
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019846D2253D391478660AE4485D858E0E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 13:00:33 +0000
Manifest this update: Sat 26 Jul 2025 13:00:33 +0000
Manifest next update: Sun 27 Jul 2025 13:00:33 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: Guvzddj9JfMURcD6+QNIUsl/shNs4tNjTXz0Cxf8DlA=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:25:3d:39:14:78:66:0a:e4:48:5d:85:8e:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jul 26 13:00:33 2025 GMT
Not After : Jul 27 13:00:33 2025 GMT
Subject: CN=8f0329349b4ef6812135d9bfa37c3b1168d57d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:b0:9d:f5:53:10:17:f8:70:ee:5a:95:0e:
02:0e:b2:12:d4:57:0c:20:47:bb:2e:ea:11:8e:ac:
9d:cd:8d:26:6d:e9:9a:75:cf:d4:f3:99:53:b3:0d:
d4:d9:07:df:63:fe:17:a7:aa:25:a5:e6:6b:45:fc:
03:aa:75:7e:a2:01:ce:40:b2:a9:d8:53:f8:13:89:
5c:44:93:33:8e:8e:bf:16:7e:9d:f3:3c:7b:1a:01:
60:94:80:f6:42:6a:e0:d4:05:f4:7d:09:a1:49:b6:
34:6e:ae:15:51:26:5a:77:3c:a6:13:ec:85:25:19:
31:e9:9e:b8:40:20:9b:91:8e:2c:ec:6d:39:95:ce:
5f:29:23:51:71:a4:92:4e:11:dd:96:99:bc:f4:30:
aa:63:e8:76:b3:d3:ee:65:23:17:45:ca:a6:c7:4c:
73:a2:ff:46:22:50:65:8e:6a:30:e6:95:32:01:94:
d7:bd:8f:59:16:53:b5:51:07:4a:44:73:10:8e:96:
d5:40:20:80:89:12:8e:af:86:b8:da:c6:d1:31:9e:
a2:da:27:07:b2:a9:b7:bf:e5:29:11:03:df:ab:f7:
b0:07:c6:de:6e:b0:c4:9f:0e:33:97:3c:b0:1a:8c:
98:46:16:3e:da:d3:c0:1e:1d:c0:ef:70:05:3c:fe:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:03:29:34:9B:4E:F6:81:21:35:D9:BF:A3:7C:3B:11:68:D5:7D:86
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:d3:39:5c:7c:eb:a5:6a:a3:04:21:1a:a7:01:80:8a:d1:
fc:b6:98:8c:99:17:20:3b:e4:3b:1c:70:c8:70:5b:85:5c:ff:
a3:2a:1b:96:2e:50:b6:13:9d:65:d2:f1:57:60:6f:8e:bb:50:
69:b0:12:2a:0b:59:75:0b:01:c2:8f:88:1e:9c:d9:7c:53:f2:
7a:16:ae:c1:a9:e9:82:0d:91:50:8e:6d:6a:47:bd:01:94:16:
d8:56:ae:89:1b:1d:e9:11:f9:df:bc:a0:26:17:00:e9:ee:7a:
e2:1b:0f:7c:d3:dd:ec:a1:6a:a6:37:8b:78:ed:0b:a3:f4:c7:
8d:3b:19:35:8d:38:cb:12:38:7b:42:bb:37:6d:89:6c:0b:8c:
21:9e:b5:dd:6a:de:f1:65:72:f3:ac:2a:44:c2:a2:ac:7e:6d:
e0:64:11:aa:95:f6:16:a7:1a:5b:25:88:b7:2d:ea:3a:72:b4:
d5:c5:e5:ba:5f:28:e1:98:4b:b7:c3:45:cb:77:45:e2:85:a4:
f5:5d:65:53:fc:8c:16:1d:57:33:b2:89:1d:0a:1b:15:bb:fe:
e3:13:f5:66:df:82:51:28:c6:c9:c2:ae:c8:96:a4:bf:29:17:
4b:59:7f:04:b5:d1:67:0f:9d:98:79:6c:39:a5:c6:00:7b:d1:
52:5e:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:20 2025 by rpki-client