Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier: tus8GwouolU8br5xW+EKBV6nDXTIRd6Wh8o68A3Fo/0=
Subject key identifier: 37:21:E7:C4:CD:AC:62:68:C2:3B:C7:85:A2:3F:DA:71:40:8C:92:74
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer: /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial: 019921E74A512BE5F99477BC4E5F6B60E6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number: 0DBC
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: 4gm/6BzZl1dUydulnNgkEuXVcDkJH5gND9irWkZF+Lc=)
2: GzZOn0FMwyF0PqvIWI6Nnb-Vd4g.roa (hash: 5J/Uh3Vu4lMEWtHw6mjugw4/PpXu0iZuwIZUgCw3aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4a:51:2b:e5:f9:94:77:bc:4e:5f:6b:60:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=3721e7c4cdac6268c23bc785a23fda71408c9274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:92:20:fa:c2:85:23:79:e7:7e:50:35:df:
19:d2:4d:85:48:92:01:0a:fb:8f:4e:c6:5a:36:df:
71:e1:8c:51:b3:ca:33:5e:64:31:f4:11:d6:e6:6b:
76:54:41:5e:99:0e:5a:e5:f6:f2:e8:db:a5:b5:e6:
89:dc:46:f8:80:09:0d:41:e8:4a:bf:7b:29:ba:50:
5e:29:52:14:3a:ef:2f:64:4b:1c:35:f5:48:a7:63:
61:45:0b:49:5b:1c:b7:58:bd:a0:a8:ba:c4:07:03:
9d:27:ff:0e:94:13:6c:96:2e:38:01:ba:cc:b0:04:
e5:91:d6:ae:41:bb:e1:be:6c:b7:f0:13:b3:d2:49:
f1:ca:c9:da:3b:7e:dd:b2:23:4d:d0:34:29:26:e3:
07:c7:82:14:4e:a3:b8:a9:05:19:ca:28:9b:93:ad:
11:51:f6:16:2f:68:a6:8b:89:65:22:c6:e0:6e:1a:
7f:a4:96:2d:25:3d:e3:b7:b7:10:f5:c8:f3:1f:dc:
d7:b0:7e:18:ff:85:24:08:75:87:c3:24:e2:3e:84:
2d:00:d3:8b:28:9f:ad:19:e4:a2:f9:de:03:9e:66:
21:44:2c:bf:a9:c3:2e:59:4c:b7:6a:0f:af:4f:ae:
f6:ff:e3:cb:00:16:bb:24:85:b2:64:93:43:ca:7b:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:E7:C4:CD:AC:62:68:C2:3B:C7:85:A2:3F:DA:71:40:8C:92:74
X509v3 Authority Key Identifier:
keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:5f:27:ae:fb:fa:c6:ee:66:de:18:b1:de:ac:e1:82:ff:
ad:74:43:24:d1:e6:b9:4d:22:56:4a:16:87:4c:33:c6:d7:d6:
fd:c6:e4:ee:8c:d6:16:b9:70:39:45:6a:e6:be:1f:98:a0:32:
a3:81:e1:0e:03:02:0d:43:6c:aa:97:4d:08:49:0f:4f:2c:3f:
ab:aa:e4:47:45:6a:58:55:09:eb:56:2c:51:b2:20:03:4b:f1:
08:35:4b:7f:09:07:19:5a:15:06:cf:7d:4c:1f:31:32:83:27:
5a:24:9a:cd:ef:db:ae:32:e8:76:5e:12:dd:71:de:e3:b4:85:
86:f0:33:a4:4c:f5:aa:84:40:33:fe:a8:90:43:ec:5f:d4:a1:
ca:8e:46:c1:ce:93:22:29:0a:a1:7f:f0:d7:56:2b:6b:16:66:
ce:cf:0e:d8:fa:ed:81:4f:e3:53:77:09:0c:25:2e:48:f7:3d:
bd:b2:4f:d6:97:b9:c7:5f:df:7e:ce:38:16:6c:4b:51:be:06:
4d:62:5c:af:52:72:f2:cb:28:4b:a3:57:b2:fe:dc:95:76:12:
9d:d9:bb:9f:93:0f:42:1e:b3:0e:9b:44:c2:25:34:3c:a3:41:
02:39:90:5a:a2:75:de:c8:8a:cd:13:f8:42:56:1d:8f:27:a0:
26:cf:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:49 2025 by rpki-client