Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: G9MUVUVhEQbMJi/2T1ntOOgLtTHcqUIiEzsgUDuiuVc=
Subject key identifier: F7:0E:2D:DF:CC:D2:76:2E:F4:52:76:61:66:53:00:A1:2B:F6:7B:BD
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01992A4656FC2F76FB9CF5ED6F23824A44B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 1051
Signing time: Mon 08 Sep 2025 17:01:16 +0000
Manifest this update: Mon 08 Sep 2025 17:01:16 +0000
Manifest next update: Tue 09 Sep 2025 17:01:16 +0000
Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=)
2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=)
3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=)
4: UVdJ6rkBr4eKgNxEkOLstufV6r8.roa (hash: +gXeK3tudL2I9QvUvgp4q5Jq/oJHp1PYKMtr+laCpNs=)
5: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=)
6: YaM_6GNAfAUY1a7EBWWPiZdkY80.roa (hash: imYp4kHblD7OJu3xkBBiybF6gSfL+pAE8EuXrkCO7Ws=)
7: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=)
8: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=)
9: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: WcK0KKtbFvPhTrei/ZMbpqEf0bnBCMmDAwA+xjH4h+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:46:56:fc:2f:76:fb:9c:f5:ed:6f:23:82:4a:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Sep 8 17:01:16 2025 GMT
Not After : Sep 9 17:01:16 2025 GMT
Subject: CN=f70e2ddfccd2762ef4527661665300a12bf67bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:c4:ae:f4:99:e0:a7:af:78:38:08:e7:fc:
b7:4b:bc:b6:b5:2b:63:ff:a5:e9:85:c6:23:79:aa:
9e:52:8b:1f:71:85:17:27:01:7c:b2:94:4a:0a:2b:
0b:88:a4:a5:34:ab:15:9c:4a:c9:ee:97:42:e7:9b:
e1:92:6a:71:e2:49:d4:5b:2d:6a:b8:22:d9:75:28:
39:03:c5:44:5b:db:b7:70:07:d3:87:19:9d:31:02:
ec:f1:d5:ec:f6:2d:df:ea:9c:59:fc:55:3a:99:4e:
55:e7:88:2c:5a:74:79:7b:6a:21:ff:ea:08:73:91:
3f:b6:e1:fb:0f:84:a8:14:b5:ef:6c:d4:73:88:e7:
f9:2f:99:ea:7e:0d:f2:0d:26:39:a3:e8:08:69:42:
d1:9f:58:b6:a9:41:d6:ac:ee:50:9a:00:02:89:63:
b2:70:26:64:35:33:b1:6c:e2:e6:ef:99:b2:64:91:
7d:c7:06:80:5e:86:2b:ad:d7:6e:ce:f9:72:f8:4a:
b9:3d:a7:06:c5:e1:cb:2a:e7:d2:cd:ca:5c:9b:95:
03:d3:06:d7:20:31:7f:10:42:02:80:48:53:a1:e5:
bd:2d:62:32:38:7e:62:3b:43:bb:6c:b5:b2:25:ca:
2b:f7:b9:67:98:bb:64:f0:1b:ab:58:36:34:64:42:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:2D:DF:CC:D2:76:2E:F4:52:76:61:66:53:00:A1:2B:F6:7B:BD
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:70:0d:fa:46:6e:1d:86:11:c6:74:ff:36:c2:0c:ea:4b:
8e:35:97:ad:e1:98:60:38:6d:0e:48:b6:14:d7:b0:d8:18:2b:
83:14:8f:03:12:d3:1e:a9:82:0f:7b:69:d2:c6:cc:ad:63:c3:
17:4a:0c:08:e4:5f:29:88:21:8d:f7:99:69:fb:11:ae:17:a8:
ca:33:3b:52:59:55:08:11:43:8e:14:82:4b:b8:f5:19:da:cf:
e5:a6:91:b2:8a:6a:f1:8c:69:b5:5e:3a:9e:93:b3:eb:d1:bd:
4f:ce:e5:65:de:56:b1:9c:81:49:3b:7d:74:83:e4:7a:3f:34:
d9:8f:a5:1e:05:65:f2:ef:ff:90:64:13:75:f6:d3:0d:7b:cb:
47:fb:de:13:b7:99:fd:74:c1:9d:f4:49:9c:05:02:33:3a:7f:
ed:5b:fb:52:62:b7:58:a4:d9:15:dd:c8:d5:09:ce:66:ed:0b:
7d:1c:a5:bd:53:eb:8f:69:77:2f:cf:89:76:34:fe:7c:73:39:
9d:d0:62:1b:46:93:68:db:79:05:0c:39:b8:23:ec:c6:1c:f9:
7f:7a:1a:40:e1:90:54:c8:c6:af:99:c2:a1:11:46:89:34:09:
91:3e:d0:39:bf:f9:51:93:b6:24:b9:0a:e8:3d:04:a4:4f:f4:
61:25:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:13:25 2025 by rpki-client