Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: V/pp9O75avvMWMB6RriQ7NHyUZkCS9tAAWKlZr8j8Lo=
Subject key identifier: 08:D9:26:6C:CD:9A:E5:78:2B:67:16:DE:CE:AB:D4:24:7F:EA:96:F0
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 019923312E75EFCEBA1FB2EFED4C4CEA4560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 0EE5
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: eUuTXXEV5D7vkpbyjVSk96q9wUE/Srf14M52ch5G7s8=)
2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2e:75:ef:ce:ba:1f:b2:ef:ed:4c:4c:ea:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=08d9266ccd9ae5782b6716deceabd4247fea96f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:6c:e6:8b:ba:6c:d0:77:46:a3:b8:be:9e:
95:e7:4a:7c:1d:f1:c0:ea:2f:7d:0d:d5:db:96:c6:
35:2f:a2:c6:e9:3c:68:78:a9:6f:3e:08:b5:f1:31:
1c:c3:80:ba:42:b3:94:85:0a:ed:6e:29:d5:60:0f:
6e:b0:2f:06:8e:a7:62:c0:01:2d:61:8a:ca:51:a1:
4e:da:26:dd:2b:43:48:84:a9:81:77:ee:51:46:c1:
1a:57:d1:7f:6d:fb:74:10:ff:6c:17:e3:1b:9b:e2:
25:78:96:4d:d2:1e:2a:b7:40:ac:07:ad:4a:09:29:
aa:b6:cf:a5:c0:f9:dc:b0:5c:eb:d2:4c:49:96:64:
6d:bc:a2:eb:90:3e:34:70:4e:4b:aa:5c:3e:90:bd:
54:ff:a5:48:55:25:34:1f:21:d5:1d:c4:7b:bb:30:
08:cd:d8:60:5e:22:bb:b6:72:1e:e1:93:7f:c7:ad:
b8:0c:26:9e:e0:30:ed:a1:13:85:b7:ff:d0:f6:7e:
18:47:1d:ca:33:1e:34:1f:7b:f4:b9:8f:b6:6a:a8:
c8:de:6a:9b:d3:6e:33:55:5c:b2:22:a2:b5:18:50:
a6:62:9c:d6:49:ad:83:ff:7f:60:6f:ba:c0:30:c1:
f2:b1:17:76:5d:48:0f:31:4d:60:bb:cb:80:52:a2:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:26:6C:CD:9A:E5:78:2B:67:16:DE:CE:AB:D4:24:7F:EA:96:F0
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:5a:6d:5b:49:15:10:78:7a:4e:91:34:85:d6:23:32:73:
18:9e:06:86:83:41:26:f2:d0:b5:42:1f:6e:c7:a7:95:33:65:
3e:89:60:07:10:04:59:8e:4c:18:72:d5:c3:a9:04:17:9d:df:
0e:cb:5b:c4:4e:7b:0e:96:91:b5:79:f5:50:8e:1c:17:63:99:
a7:c8:33:24:ae:35:ab:fd:ef:3e:2e:cb:4c:1e:b2:25:e2:b0:
8e:6e:c6:b7:39:ec:c9:3f:6f:27:14:5f:bd:6f:04:2f:11:eb:
98:db:fc:26:ce:6e:9e:c6:13:cc:6c:5e:4b:78:38:2a:e7:61:
9e:da:4d:03:96:9c:14:ba:a2:0c:5e:98:b6:40:87:d5:87:be:
b4:13:1f:35:b8:4a:48:88:30:9d:ba:da:dd:12:0b:75:10:8a:
41:50:d4:a4:ff:3c:d1:e1:ea:51:56:c0:5f:3d:a8:e2:f2:88:
82:e6:7f:b1:6c:f2:0e:eb:ce:a2:66:90:31:7d:6b:0d:43:54:
bf:0a:38:f4:1c:77:02:b8:fe:0c:4e:77:63:8e:8e:8d:a6:6d:
05:a5:c7:b9:ce:2e:47:65:82:3d:05:d5:b0:47:77:5c:0a:e1:
6a:18:b0:fc:56:5b:25:d4:28:92:55:36:df:96:31:e1:ea:13:
47:85:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:12 2025 by rpki-client