Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: Xzr6w/4TaUF+ujfGPwdk0mLuWZN0k1Tul3p3nLpk4Vg=
Subject key identifier: 62:C8:45:E0:7C:7B:5B:0D:8B:98:7D:17:3E:67:6B:24:84:3B:2B:F6
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0199172D4BA901538D15D68E555D1437952D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1264
Signing time: Fri 05 Sep 2025 00:01:08 +0000
Manifest this update: Fri 05 Sep 2025 00:01:08 +0000
Manifest next update: Sat 06 Sep 2025 00:01:08 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: gUn1cxSWgm+jzU+4LOXH6X2iqB4S7acqH0P/gNk9HsI=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:4b:a9:01:53:8d:15:d6:8e:55:5d:14:37:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Sep 5 00:01:08 2025 GMT
Not After : Sep 6 00:01:08 2025 GMT
Subject: CN=62c845e07c7b5b0d8b987d173e676b24843b2bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:3b:b4:d1:d2:70:fd:ff:05:97:e6:29:a2:
ed:2e:a6:c8:2b:1d:d9:de:23:22:0e:60:c4:e1:da:
de:4f:a6:8b:9c:78:05:30:6e:1f:51:8f:5b:3f:a8:
2c:7f:d8:66:a5:97:a4:91:d5:ab:90:aa:46:93:ea:
6e:9b:33:45:37:1c:45:a8:b7:32:d6:3a:c5:55:92:
fa:bf:79:62:ca:3e:0a:11:95:ac:5b:7f:28:30:3d:
fb:2a:08:a8:db:ea:49:de:de:39:88:c5:fb:50:0d:
bd:98:95:87:dc:84:4b:30:1a:08:ea:d9:66:e0:ea:
56:78:9e:53:3d:78:37:3b:c7:78:df:6e:14:6a:e0:
25:b5:e4:b1:bf:de:c1:78:69:5f:b1:67:bd:18:ee:
63:7d:d5:9d:c9:f4:c1:46:4b:42:45:9e:95:8b:2b:
24:7e:cf:e9:7f:03:96:e8:71:75:67:f2:e6:74:b1:
7d:80:d9:ed:a8:85:0d:a6:84:bb:db:e4:e6:a8:a4:
ce:32:69:8c:6a:a5:85:2e:f4:f6:d1:04:33:e9:7f:
36:41:87:24:53:60:57:7e:77:2e:35:2d:08:85:fa:
6d:a7:2c:21:eb:70:ee:ca:d6:6e:02:bc:1f:d0:08:
44:78:63:9f:06:48:3d:e4:8c:33:28:40:08:2b:a1:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:45:E0:7C:7B:5B:0D:8B:98:7D:17:3E:67:6B:24:84:3B:2B:F6
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:31:17:16:0b:d1:8f:0a:9f:ba:19:e0:53:26:e3:15:cc:
cb:8d:3e:31:5a:41:f0:3c:16:9d:fe:c6:cc:eb:61:c5:89:37:
e1:91:1c:b9:3f:b9:cd:64:2e:e5:59:c6:7d:a5:0a:92:91:fb:
99:3b:1a:bd:80:18:79:b6:53:69:d0:50:69:15:40:ad:ef:36:
40:d8:4a:73:62:d0:83:e9:7f:a3:d9:ae:60:40:f0:a1:11:b8:
9d:9c:d0:00:c8:fd:97:57:bd:6c:0e:af:72:9a:7e:42:0b:8f:
c9:ee:de:2a:d8:26:f8:5a:70:f1:e8:20:5b:71:1d:73:d9:b8:
e5:f4:fe:aa:fd:a6:00:d1:1d:f7:0b:32:a7:bb:49:d1:ca:ef:
13:2b:1f:ac:db:bf:07:ed:0e:f1:44:06:81:99:07:b7:fa:bf:
18:a8:36:f8:26:d7:32:85:2b:d6:ea:02:e5:26:db:5a:ba:c9:
5e:b0:40:f4:59:76:51:83:cf:35:7d:e7:91:b0:bd:2a:bd:c6:
f7:31:1d:03:f3:c8:4d:09:f7:e0:a4:4c:c1:9f:78:22:e6:6e:
a2:b1:9d:24:43:f0:ea:85:59:10:aa:0b:7d:bf:1c:38:9b:63:
3e:83:b3:01:0d:42:de:bc:83:dc:c8:e5:98:47:53:70:13:02:
ab:60:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:55 2025 by rpki-client