Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: PvjTvneSMj+UbXJjGko48v0p4iLHRDR8Oi8P8HW+2IM=
Subject key identifier: 0A:CC:6F:3E:F7:14:78:BB:7D:30:54:DC:21:DA:A6:51:AC:8C:9B:CD
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 01992F6C9D7BEECC208759365A6B7A6E3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 17:01:11 +0000
Manifest this update: Tue 09 Sep 2025 17:01:11 +0000
Manifest next update: Wed 10 Sep 2025 17:01:11 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: I9g611QQpgz5Qq9e6cesNkRrTI6KsxTdZsys4f163zo=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:9d:7b:ee:cc:20:87:59:36:5a:6b:7a:6e:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Sep 9 17:01:11 2025 GMT
Not After : Sep 10 17:01:11 2025 GMT
Subject: CN=0acc6f3ef71478bb7d3054dc21daa651ac8c9bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:6d:f9:36:39:8d:20:5e:dd:67:4f:ad:fb:
ad:15:10:0c:3b:05:b9:e8:bd:a5:6c:73:9a:69:a5:
f6:c3:dd:99:eb:fd:49:45:d2:da:b3:31:98:25:1b:
5b:c0:54:6d:81:29:9a:4b:a4:20:fe:06:77:d5:ff:
da:c0:c7:92:8a:04:a6:94:31:16:fc:a7:1f:f5:0c:
31:a6:18:f5:cf:9b:8d:df:e1:6b:ec:ca:c2:fe:86:
f8:a3:11:15:24:3d:a2:e6:70:17:7a:f2:63:e6:c8:
05:22:5d:3c:b1:4f:90:3a:d8:7d:77:e6:f5:22:42:
ce:47:0f:e9:66:47:18:0d:97:9e:56:1e:84:1e:d1:
30:cb:13:ec:08:c8:65:59:bb:33:7c:98:e2:13:d0:
6b:d2:59:f4:19:0a:05:01:68:65:09:08:5c:99:10:
70:fa:e9:75:f3:e8:c2:15:0e:90:c2:13:b5:7c:cb:
20:9d:ef:50:4c:ac:2b:30:de:77:73:c7:c4:b0:aa:
46:02:88:b9:e2:26:0f:6d:55:f0:59:72:b4:68:02:
af:63:f5:75:a9:8d:fd:c9:c7:69:54:0a:05:c1:99:
ff:a2:b8:14:6c:fc:89:20:06:cc:3c:e9:f4:14:48:
ab:ce:c9:13:b9:eb:72:c3:03:c6:20:fc:de:17:77:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:6F:3E:F7:14:78:BB:7D:30:54:DC:21:DA:A6:51:AC:8C:9B:CD
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:10:61:8e:4d:81:2d:d0:a0:60:68:48:e4:85:93:0c:f5:
47:10:d3:57:35:d5:fd:01:57:1d:86:cb:32:e9:b6:a1:4c:fa:
6d:4e:ac:62:2e:f8:7b:19:ef:cf:c8:ea:99:36:1c:c2:d7:82:
8a:dd:1f:27:f9:e7:43:51:9c:e6:ff:f5:7d:e1:42:a1:48:d6:
79:b1:a3:f4:23:f2:86:50:d7:cd:f2:ca:f8:38:9d:fb:67:f8:
b4:c8:30:11:72:d6:2c:40:2f:52:81:e9:02:5e:77:ac:0d:cb:
ad:58:51:ec:3f:b6:d8:11:d2:59:9a:2c:06:29:6d:f9:23:53:
d7:5f:0d:71:20:97:61:ac:00:ff:6f:47:38:a2:e7:13:3c:59:
be:2d:aa:48:88:cf:ee:2b:e4:fd:2c:8c:94:8d:06:21:9b:95:
a5:3a:a7:3d:ff:73:e6:c1:9a:60:65:2d:10:ba:08:d6:24:a5:
0e:f8:d6:9f:c1:8a:da:b4:8e:af:30:c5:c9:ad:6d:ef:d7:86:
e5:6e:f8:aa:f9:64:8a:76:02:7f:14:05:a1:53:8f:32:ff:3b:
01:14:cd:36:5b:05:86:d2:e9:ee:63:18:07:8b:0a:e6:83:7f:
03:4f:b1:ed:20:99:f4:ce:2e:1c:ee:32:43:1c:8b:9c:37:72:
7b:72:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:10:01 2025 by rpki-client