Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: 3qj+Ce30WHUMUsEPdlRM5LhtJFxew4/yDLYrD/LQfRY=
Subject key identifier: D3:A1:7E:70:B4:60:7F:BC:8A:16:92:94:67:61:E5:0E:5A:93:79:FC
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 0199233167619652B5B2110A63B7F8053ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: kgD9yLjal0smfNLxKOaMHy4cjDgckcddgvsEdmLia9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:67:61:96:52:b5:b2:11:0a:63:b7:f8:05:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=d3a17e70b4607fbc8a1692946761e50e5a9379fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:43:64:60:74:5d:35:1a:ad:bd:3b:d2:b3:
82:3f:82:ec:9b:3b:b2:66:53:cf:51:04:ff:25:fb:
b2:32:16:49:ca:09:6a:22:4c:8e:21:aa:2a:52:4d:
f6:74:94:c3:33:02:d8:3b:e0:2d:4f:2f:9b:fa:54:
4b:58:b2:37:35:2f:81:0f:c3:6f:87:66:a5:97:18:
77:1f:c6:24:7f:46:bc:b9:41:b4:0e:71:ba:5a:40:
b4:2d:96:68:2c:95:08:78:d6:9b:11:1a:f3:81:47:
2b:d1:72:9d:19:36:be:b6:26:e6:12:9b:1f:be:be:
37:de:07:16:6e:c5:98:4e:95:65:d8:11:67:58:d5:
3f:6a:de:df:bb:12:53:9d:21:bb:3a:ce:2c:b3:67:
63:89:62:18:b8:55:10:6b:6c:34:1c:d6:d9:d0:4f:
db:61:1c:a3:3f:90:2e:3f:e7:ce:7b:2d:37:c4:45:
13:5f:9c:5b:6b:5a:b9:b1:f0:7b:21:af:23:1e:01:
2a:44:0b:91:1b:70:fd:cf:f7:24:90:a5:4f:65:0c:
fd:21:47:9b:77:cd:ac:d7:d3:2c:cd:d1:07:82:33:
dd:30:6a:4c:f7:8f:59:7f:64:12:d0:9f:d5:62:63:
54:50:c8:7e:c9:e3:ad:26:c1:86:94:a7:ea:2d:99:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:7E:70:B4:60:7F:BC:8A:16:92:94:67:61:E5:0E:5A:93:79:FC
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:99:90:56:5c:b1:94:ff:ca:94:b8:3c:c7:f5:e8:75:72:
07:a8:6d:45:fe:f6:a4:9f:91:58:62:f8:4b:2c:85:a8:a3:9b:
c8:16:64:2d:7b:a6:e7:59:42:ab:71:0f:fa:97:fe:03:a0:e3:
ae:c5:09:47:6c:50:d9:70:59:d8:ce:0c:fc:37:7c:f5:c2:14:
a9:53:41:bd:71:7b:ac:1c:33:96:72:cf:cb:4e:71:b1:90:79:
fe:78:55:e5:82:8b:d5:2a:52:6f:14:bb:71:d6:b3:90:b6:eb:
79:ea:62:11:cd:d2:09:70:ec:9a:b4:9f:63:a8:8b:fb:0f:75:
b7:d0:5c:f7:5d:68:53:b2:8f:5d:f8:ed:75:df:9a:eb:4b:0a:
58:2d:e2:07:b4:60:80:7e:10:75:be:1c:43:3b:9c:b7:27:c0:
99:b4:af:e8:c7:d4:22:f2:ff:3c:d8:23:71:1d:7e:0a:45:67:
1d:d2:d2:8f:5e:64:32:74:d5:8a:90:f4:79:99:2b:87:ae:cf:
eb:72:fe:0e:cc:85:82:34:d6:c2:8a:94:05:e2:05:f3:78:df:
97:ba:6c:8e:d8:3a:7a:35:e2:fa:51:7f:e9:c5:ee:79:86:54:
73:7f:52:08:9d:a2:04:db:6e:a3:4b:60:a5:2e:f5:d5:3d:d5:
d8:fb:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:59:16 2025 by rpki-client