Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: S5mkYCmgQgiC93l87wNg7LdIYxmm+Qrf2G+lxaC899Q=
Subject key identifier: 95:F0:A4:EF:B2:2E:B0:3B:27:7E:FA:FD:84:45:E5:50:B0:5D:00:79
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 01984A781905E706AF23E5875AEEF0C47B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 021C
Signing time: Sun 27 Jul 2025 06:00:41 +0000
Manifest this update: Sun 27 Jul 2025 06:00:41 +0000
Manifest next update: Mon 28 Jul 2025 06:00:41 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: wrcTBDzt+PpMerknLAjKJ/fvXtEkMN0Da4vPT0z3mr0=)
2: WZ6QV7I388WfR1atNyelt0Q9Mso.roa (hash: KwrEk8zO8slIVjQv6gkfQCNK8LKZkPpOkNAIgKKlEQo=)
3: w3ygjB50ZRx92w3E54KyIR8KqJ8.roa (hash: cXhal8oweMGLldAVM2weLR4PJghtsshTj6l0MVxO5bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:19:05:e7:06:af:23:e5:87:5a:ee:f0:c4:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: Jul 27 06:00:41 2025 GMT
Not After : Jul 28 06:00:41 2025 GMT
Subject: CN=95f0a4efb22eb03b277efafd8445e550b05d0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:30:0d:68:33:6b:44:84:29:8c:80:56:a9:
e7:4d:a3:a1:70:3e:3c:2a:91:49:ad:ba:ac:4c:a3:
b6:a0:7c:68:76:d6:ad:d7:62:c9:e9:77:77:70:e9:
0e:b0:77:eb:b4:be:23:b4:18:72:62:2a:ab:ae:1a:
fb:06:58:f8:da:fa:a8:4d:45:e9:86:20:86:7e:de:
df:76:33:02:a8:6c:66:e5:92:1e:51:32:28:bb:d5:
3d:cb:9a:43:f1:6e:ea:f4:36:a9:b1:70:88:0a:4b:
38:d8:60:80:c2:3a:ff:28:40:2a:b1:97:f8:33:fb:
e7:8d:03:b8:e7:f5:50:47:43:7f:7e:73:a6:d4:f6:
cf:69:8d:14:5c:03:52:ec:fe:09:c8:46:d9:72:6f:
bd:d9:ec:31:80:cb:8a:4b:2b:f2:1e:c7:a5:6d:44:
8f:5d:3b:b0:86:2c:e6:4c:64:5e:1a:af:32:e8:61:
c3:6d:80:4e:65:7d:a7:fb:24:8e:35:96:d9:4d:d4:
5b:d7:7e:c4:18:5c:36:9a:3a:c9:74:53:e0:96:8c:
8c:47:70:c2:4c:5b:21:95:af:de:87:a6:a1:10:ef:
d9:e0:0f:77:92:a5:76:03:90:aa:e1:0a:bb:d0:d7:
0c:cc:2f:ba:40:75:37:03:fa:1e:36:49:86:c2:87:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:A4:EF:B2:2E:B0:3B:27:7E:FA:FD:84:45:E5:50:B0:5D:00:79
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:56:1e:ef:7e:44:21:0f:17:02:ab:62:ad:6c:bb:d2:ed:
54:bc:1a:de:eb:bc:d4:df:3d:2d:ce:37:bf:7e:72:ce:21:07:
9a:b8:62:26:1d:dd:e4:db:f2:fe:57:50:1b:7e:c4:23:33:04:
36:91:95:b7:a3:bf:d9:26:3d:12:3b:3c:f3:08:e8:65:cf:87:
96:1e:b2:85:f2:af:c5:fd:b8:68:dc:e1:f1:60:4b:6c:9e:93:
05:4a:dc:55:0c:49:cf:c1:26:4b:4e:b8:76:01:4e:2d:68:bb:
0a:78:c1:f9:53:b8:42:d1:a1:7b:14:f3:dc:83:2b:cf:ca:ce:
5d:5d:7a:8c:a1:4e:bf:fa:f6:64:36:3c:4e:b6:2f:fb:df:b5:
b6:f6:dd:ae:2d:7b:99:60:d9:64:6e:62:d2:32:d0:e1:ea:5f:
72:60:c0:90:e3:91:e1:2f:d0:78:39:98:b5:6a:dd:01:1b:c1:
16:c8:94:5d:14:bc:b9:a3:de:92:9a:76:c9:38:fa:43:aa:c2:
70:1e:d9:cf:42:06:7f:f1:1d:68:5e:fd:81:c2:ef:15:51:2d:
36:4f:91:3e:a1:54:6b:cb:35:9a:d0:f9:4d:67:a4:0a:e1:10:
49:79:ca:3d:40:90:42:d1:1f:a1:be:d9:e1:ab:44:4a:c9:cd:
b4:8b:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:22:17 2025 by rpki-client