Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: 2H9PvFpNLvSJb5+teaU57XjBDbu00U4gDHf2ozCukL8=
Subject key identifier: 5C:E6:87:82:F3:A9:3E:36:5C:61:9A:15:71:F0:3B:14:2C:97:ED:76
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 01991D2FB982E00A5F07C7427FC6A6B9B587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0EF3
Signing time: Sat 06 Sep 2025 04:01:30 +0000
Manifest this update: Sat 06 Sep 2025 04:01:30 +0000
Manifest next update: Sun 07 Sep 2025 04:01:30 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: 0zaA1bWa1jg1uhdgTCywnZoZl4wwHELn3V33Szz6q38=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:b9:82:e0:0a:5f:07:c7:42:7f:c6:a6:b9:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Sep 6 04:01:30 2025 GMT
Not After : Sep 7 04:01:30 2025 GMT
Subject: CN=5ce68782f3a93e365c619a1571f03b142c97ed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:be:95:02:8d:fa:1e:a6:93:b7:e8:30:76:
dd:1f:fb:9b:9e:ef:a0:b3:f8:e9:2b:4e:19:4e:21:
6a:65:fc:2d:9c:ec:97:ca:b9:0a:b5:43:af:6b:c8:
74:2e:60:11:67:86:70:2c:e6:73:13:73:bf:b7:3d:
85:80:7b:2c:41:33:58:ec:76:cb:2b:e4:a3:0e:9e:
69:fd:9e:b6:b3:68:73:9d:25:16:b1:d3:b4:a5:4d:
a8:79:61:7b:bc:91:af:fc:ba:73:ab:83:f1:2f:5a:
5a:0c:e6:41:b8:42:8b:c2:fa:9d:8f:1b:22:5a:02:
19:41:bd:ca:bd:b1:d5:a0:5b:cb:a4:39:3d:79:cb:
91:da:79:32:58:a0:0c:e2:71:5d:a8:7b:89:c5:79:
30:7c:2e:d2:09:41:af:c5:eb:d4:da:30:70:b7:e2:
63:96:0d:0b:6d:5e:0d:f9:a2:70:75:89:b7:f9:92:
2e:a4:52:49:8d:58:22:3f:cd:46:ca:29:50:4f:de:
e4:e5:fa:ba:06:77:86:f3:78:b0:88:aa:0a:57:2f:
d0:8d:a5:cf:55:38:6b:1d:21:66:c1:d7:2d:fa:da:
c0:4a:2b:55:ed:9e:87:ac:c6:26:f3:ba:36:42:bd:
73:f9:9c:fa:14:70:e7:0b:8d:bb:7b:f8:d9:ed:68:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E6:87:82:F3:A9:3E:36:5C:61:9A:15:71:F0:3B:14:2C:97:ED:76
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8f:99:75:d4:e9:49:60:ab:5c:d1:4f:0b:f7:4c:22:5f:1d:
c7:87:a6:32:29:8f:51:4e:1d:a1:57:17:52:e6:08:78:45:50:
cd:25:b6:67:d5:a9:36:d4:41:9d:9d:dd:06:b9:29:43:ee:69:
13:27:b9:8d:8a:48:ab:f4:0a:8c:62:f7:ab:08:7e:0b:d9:89:
1f:d2:1c:60:b1:1e:84:aa:af:47:28:75:77:bb:94:34:cc:b2:
13:a1:fb:bf:02:6b:bf:14:76:c7:7c:e6:f6:5f:f7:88:8d:68:
ce:77:90:ef:48:22:9e:38:fb:c4:54:96:19:7c:7d:31:2c:09:
29:1e:bc:62:d1:09:b3:9d:5c:a2:58:98:26:2f:14:7c:3e:03:
03:02:cc:0b:a1:44:ef:37:99:90:1e:14:a6:76:b5:56:0e:ae:
e0:88:a1:f6:9d:ed:96:37:99:e7:e6:d2:b7:e4:9c:49:6f:25:
97:1d:2b:53:44:fa:d2:ae:bb:3f:7b:1f:de:76:d8:5c:aa:4f:
c2:4f:ae:c0:88:d8:8d:2b:0a:71:ca:8e:a4:89:13:6d:d2:3c:
b0:79:16:19:78:db:44:c2:5e:2e:3a:2c:8c:95:fd:88:7e:d4:
45:27:15:6b:b5:e6:7b:0c:76:2b:c0:2f:21:8f:62:57:51:71:
d4:77:5d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:02:34 2025 by rpki-client