Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: FRPuUSEVJxjM1Ma+qriKJijkZbQRDnzuxkbdr64pY7c=
Subject key identifier: 12:D9:20:E6:8B:49:73:B5:76:FF:8D:F8:10:17:6E:13:C6:DA:42:D7
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019921B0533A51578E9FE305A5F9F4318410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 1044
Signing time: Sun 07 Sep 2025 01:00:27 +0000
Manifest this update: Sun 07 Sep 2025 01:00:27 +0000
Manifest next update: Mon 08 Sep 2025 01:00:27 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: zjj4tyR7cRdcz/rISmYMzQ5Tvjpq9AmhcnpziXQxyHA=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:53:3a:51:57:8e:9f:e3:05:a5:f9:f4:31:84:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Sep 7 01:00:27 2025 GMT
Not After : Sep 8 01:00:27 2025 GMT
Subject: CN=12d920e68b4973b576ff8df810176e13c6da42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:26:eb:bf:cd:65:42:bb:52:50:45:d2:88:
0b:8a:43:e5:fe:56:ed:67:a0:d8:d5:a8:d6:2b:c8:
a7:4a:c1:4c:bd:4d:da:37:d0:58:ec:10:a4:d8:c9:
34:06:21:6c:f9:1e:61:b3:2c:dd:6a:26:85:37:b4:
c8:54:20:f4:39:5d:41:64:6e:a9:37:b1:a5:e8:48:
40:df:62:90:2c:1a:9a:26:e2:44:9b:8c:f2:9b:18:
6b:10:3e:5d:4e:7a:94:d5:a2:c0:24:c4:30:1d:5c:
b3:12:55:6f:a9:70:ea:06:20:52:4f:9d:f9:83:b2:
3b:68:e6:9e:81:f2:3b:48:bd:43:4e:c2:bd:25:bd:
4d:22:2b:4e:3c:16:fe:83:cd:26:12:a9:4e:81:a8:
a5:a6:0f:57:38:05:cb:07:1e:a4:94:48:51:b3:39:
13:9a:bd:a0:e0:a2:20:c5:ee:76:77:60:49:5c:80:
58:2f:fd:06:90:c1:46:ca:89:9f:d0:5e:69:bf:ee:
4d:31:b1:5c:e4:8b:8a:da:11:df:e6:b7:6a:cd:81:
b5:6b:41:7b:f7:99:3e:87:23:f0:94:df:97:45:5d:
e4:36:32:c0:2d:47:c8:88:68:f7:07:77:a9:aa:2c:
f4:f6:ae:c7:81:1b:15:79:f3:09:7c:74:ad:7d:70:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:20:E6:8B:49:73:B5:76:FF:8D:F8:10:17:6E:13:C6:DA:42:D7
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:f1:7f:37:65:45:0e:5f:11:76:55:44:66:cc:10:c5:d1:
36:90:3f:8f:47:e8:a5:c0:73:ac:9a:b2:af:66:b4:c9:e6:25:
90:0b:57:64:94:45:5a:fc:93:3c:8b:35:ce:62:1c:55:c1:63:
6e:01:79:3d:23:f0:bd:eb:73:d1:9d:da:96:c4:93:eb:b1:c6:
0f:45:15:15:fd:78:b2:c2:da:10:43:06:10:34:1d:0a:8c:75:
7d:59:75:43:3d:9a:14:86:6d:6b:37:73:b0:07:b4:9b:fd:a9:
ff:eb:4d:41:d9:43:80:0e:f2:27:ad:2b:c7:1b:36:eb:7a:c2:
7f:51:7d:9e:29:6d:19:aa:1e:5a:4c:99:e3:4f:1b:e2:a2:aa:
a2:c0:01:5d:5a:06:5b:33:b3:e1:65:e4:a7:11:28:77:06:74:
aa:69:db:ec:ec:3f:9d:00:86:be:32:23:06:59:1f:17:6b:cd:
64:6c:06:d2:cc:04:77:a5:20:91:af:ef:38:70:e2:20:0a:1e:
b8:bd:24:84:8e:1c:8c:f9:64:8c:c7:8b:9e:ed:47:c6:2b:88:
91:92:a0:12:1f:b2:7e:c6:ad:8a:18:08:f8:04:59:a2:51:be:
51:e0:fb:7b:5a:ae:89:ef:05:5b:4c:d4:d8:a4:74:86:f2:9e:
e0:79:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:01 2025 by rpki-client