Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 560WEHK1dMuW5ngMqJN69t9rcsKW0P6Cf8VKMdMQ/f8=
Subject key identifier: A7:AF:54:43:DD:79:8C:3D:A3:95:85:A5:1D:9E:22:23:DD:0D:A9:5C
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019847E4AFC60A0487CADF95E6A6BAFA85A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0693
Signing time: Sat 26 Jul 2025 18:00:26 +0000
Manifest this update: Sat 26 Jul 2025 18:00:26 +0000
Manifest next update: Sun 27 Jul 2025 18:00:26 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: nsWFRv9Hnda4sF50fN0W1fFtLlCM7Rcd3eAXCLn++ZY=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:af:c6:0a:04:87:ca:df:95:e6:a6:ba:fa:85:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jul 26 18:00:26 2025 GMT
Not After : Jul 27 18:00:26 2025 GMT
Subject: CN=a7af5443dd798c3da39585a51d9e2223dd0da95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:79:28:d2:d2:a4:57:e7:b7:c0:f2:6d:fd:
ba:46:7b:d4:b2:ae:2c:ba:39:fe:a3:08:78:e3:31:
22:af:dd:4e:9b:ca:1b:7b:fc:56:00:49:34:67:fa:
5a:96:47:1c:38:a4:a9:a7:39:27:42:df:a7:cf:dc:
7b:cd:29:11:2d:13:c9:4c:27:42:1f:41:09:93:55:
f6:f6:8e:9e:d6:ce:90:b1:c0:f7:6b:a7:76:0e:16:
50:7c:4c:ae:28:f9:24:d8:e8:84:76:c6:79:42:b1:
5a:15:bd:dd:3c:71:4b:9f:52:9f:4f:cb:01:33:6d:
a3:c3:c8:e7:a4:d7:25:6f:07:0a:45:f0:22:b0:76:
a0:8d:4b:27:f5:eb:13:87:10:8c:1f:e4:8c:b5:6d:
46:d6:25:9d:09:b3:17:c1:36:ba:00:0c:96:7f:d9:
c7:bd:c4:4a:4e:d5:19:b7:bb:04:83:07:ab:fd:dc:
ae:fe:4e:0d:61:52:c5:25:a6:86:b2:92:06:8a:e7:
04:3c:a5:9b:a4:9a:88:b6:ed:db:c0:f6:4d:88:85:
ba:3d:ca:6f:8c:90:d2:f5:dd:7a:f4:34:a3:be:c9:
74:57:fb:a6:5a:42:2b:ef:8f:78:24:fa:e7:29:1b:
ff:76:10:a2:7a:25:cb:e3:fe:5c:75:0f:1f:06:27:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:54:43:DD:79:8C:3D:A3:95:85:A5:1D:9E:22:23:DD:0D:A9:5C
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6e:8a:9c:ec:b4:10:a8:4a:13:f0:ff:72:fa:78:fb:33:5f:
8c:25:33:58:f0:25:23:69:6e:e1:2d:d0:d4:12:20:75:64:0a:
14:d2:35:78:a6:67:5f:17:f0:ab:ce:8a:43:f5:03:0c:6d:ed:
18:7d:38:56:44:ed:bf:c4:06:33:a9:74:0e:2a:6d:c7:7f:01:
8e:b4:40:81:07:d8:a0:2e:5d:0d:63:a4:a9:03:75:3c:b9:3f:
2b:b9:25:17:4e:88:01:1f:01:4e:8c:a3:ec:b2:a6:27:72:2d:
f3:ed:8b:f2:32:5f:bb:85:f8:1d:47:82:48:a4:b9:17:85:0d:
a4:9c:e4:95:be:fa:15:19:3f:58:07:e5:3c:80:e1:38:ad:ac:
b3:92:78:d9:6f:56:fc:fd:4c:01:b0:89:e1:ec:d4:67:ee:4d:
69:67:3b:85:9e:cf:aa:63:ad:b7:bc:c1:d8:3b:b9:39:00:68:
87:8e:8d:d0:8b:be:f0:25:ad:82:bc:24:70:a6:6b:00:53:23:
9c:c6:62:fe:34:e0:dc:6b:f6:65:01:65:3e:89:ca:66:ea:b3:
59:f6:fd:46:14:64:21:81:f8:91:72:c2:71:b9:a8:29:38:1c:
96:75:d0:87:38:2c:b7:08:72:40:8e:c1:0c:71:cf:6d:34:06:
a7:2b:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:45 2025 by rpki-client