Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: vlgljHsqveQ3A+Z/JNEQJJcjk1qWk+Ct4O8/c70bYuY=
Subject key identifier: B3:21:80:74:D9:1E:38:86:C2:8D:69:9D:EE:CC:2A:50:68:A8:D4:93
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 019921B056E09769514D1DC14AD66C300798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 03FC
Signing time: Sun 07 Sep 2025 01:00:28 +0000
Manifest this update: Sun 07 Sep 2025 01:00:28 +0000
Manifest next update: Mon 08 Sep 2025 01:00:28 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: zh9BB+ZFcXI9AJYgYGW7ZpJmX8/A1FUyuyRDrCA1Kmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:56:e0:97:69:51:4d:1d:c1:4a:d6:6c:30:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Sep 7 01:00:28 2025 GMT
Not After : Sep 8 01:00:28 2025 GMT
Subject: CN=b3218074d91e3886c28d699deecc2a5068a8d493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:d7:c6:09:73:a3:43:0e:fb:45:f3:ad:ac:
3c:0f:25:ea:e3:5d:ef:01:39:59:cb:d5:e9:5d:fc:
ae:75:2b:b2:4c:9d:64:8a:29:23:cd:04:b2:60:aa:
e6:28:7b:2b:7c:47:ae:c4:ee:0d:f2:8d:46:e3:ed:
19:15:5f:49:f0:39:37:ac:ce:53:8f:8e:0a:11:c9:
0b:f0:ac:da:37:70:7c:7f:50:0e:c8:cf:7d:bf:cf:
1d:b4:27:76:a7:59:a5:de:b4:a1:bf:56:a4:82:71:
b9:10:f0:61:d3:1f:70:d7:db:cd:b1:ac:2e:4d:5e:
f9:f8:18:af:69:58:e6:d0:f6:7b:aa:8c:65:c3:ec:
b6:99:4d:40:38:0c:4f:66:b2:05:b1:1a:05:33:18:
3a:93:6c:07:e4:97:de:9f:d5:09:9c:af:d6:00:63:
c5:9b:af:59:63:cd:3b:09:d4:0e:18:20:93:a4:bf:
ca:d5:9a:7f:f1:2b:6c:76:ac:6f:9a:32:31:95:91:
1c:65:84:67:c7:ad:a8:1e:58:47:78:da:21:4f:b0:
44:c0:77:d3:db:1e:47:0d:06:f6:9d:bb:65:43:a8:
3d:7c:d1:35:12:d5:d9:ef:52:1b:af:ba:60:83:ce:
de:30:47:b8:57:f7:de:c5:4d:eb:ba:b7:4e:3f:33:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:80:74:D9:1E:38:86:C2:8D:69:9D:EE:CC:2A:50:68:A8:D4:93
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:97:f7:04:b2:42:59:a1:0f:2d:68:e0:55:ff:6b:a6:b3:19:
6f:75:10:b2:bc:ee:bf:29:a8:a2:74:1c:90:bc:9c:b7:57:03:
43:82:2a:bd:60:b5:56:a0:e6:32:7c:df:83:56:42:53:9f:b7:
f2:63:95:fc:ab:0a:c7:2d:f6:7b:07:0b:8b:bb:1f:07:49:9b:
eb:b1:cc:32:25:dc:34:84:02:2b:7f:ac:71:cc:c6:a1:4c:16:
26:55:4c:4e:d2:47:b5:90:fb:82:81:90:05:e7:a9:00:a8:d4:
db:0e:aa:88:4f:a3:45:cf:fe:f6:0b:42:9d:cd:46:df:b5:4c:
07:73:1c:b0:49:2a:88:c4:a2:c5:1c:1f:30:e7:ac:0e:e1:f6:
a2:0a:33:8d:c1:9b:dc:5d:d3:ce:91:1f:64:1e:5f:c7:8c:d1:
a3:3d:bc:6b:cb:56:70:a7:8e:0c:3b:da:29:2f:d0:72:3d:66:
bc:12:17:20:18:4d:4f:98:2a:80:71:50:5e:07:87:c3:6f:12:
aa:4d:1c:ec:ca:87:ec:74:fd:1f:29:ca:fc:4f:69:ad:a8:b8:
e8:00:8b:51:f4:7a:aa:e1:c3:c1:b2:b4:48:20:e6:d0:c4:95:
a6:01:93:1a:86:f2:cc:f5:20:e3:70:f9:87:9b:b0:59:54:cf:
3f:7d:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:58 2025 by rpki-client