Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier: PHt5QlKNA6b6ZkoA/XnCelydUxrDHY9esgKDqcMce/A=
Subject key identifier: AF:4B:C2:3C:65:FE:A4:BB:0D:CC:5E:D8:56:52:04:87:43:3C:B8:5A
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 0198499BD35841B810F98D5F20E04111A959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 02:00:05 +0000
Manifest this update: Sun 27 Jul 2025 02:00:05 +0000
Manifest next update: Mon 28 Jul 2025 02:00:05 +0000
Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: xewjo8adH838bcnawNkJkbEtGjAjvoWohXEV6dRbFe4=)
2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d3:58:41:b8:10:f9:8d:5f:20:e0:41:11:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Jul 27 02:00:05 2025 GMT
Not After : Jul 28 02:00:05 2025 GMT
Subject: CN=af4bc23c65fea4bb0dcc5ed856520487433cb85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:ac:fc:fa:37:d7:77:48:d1:d3:c9:20:60:
43:d2:b5:52:c8:87:ce:70:7b:4f:2c:fc:3e:1d:b1:
20:16:b8:4d:d9:89:19:19:04:24:b1:18:b1:ee:ba:
86:10:b4:a5:8a:3f:13:8c:8c:9a:7b:78:eb:c3:25:
1a:d2:ac:ac:a8:b6:ff:01:d5:a3:4b:50:1f:bb:cd:
79:0d:51:67:25:3c:44:ea:84:36:fa:31:7b:90:7a:
08:36:97:50:eb:c8:b2:7b:e7:9d:76:e7:90:b6:16:
68:9d:a9:5a:bd:cd:24:70:15:b4:b5:91:54:4c:f9:
a9:96:1e:c4:63:9f:38:76:26:81:dd:77:82:21:04:
a2:c5:d5:9d:d2:e3:76:4d:94:e0:78:fe:e5:5e:69:
e6:35:97:2b:29:22:69:86:49:65:d9:6c:81:34:f3:
b6:00:33:66:c1:54:63:9f:ee:dc:1e:df:ec:16:7e:
bb:29:45:e0:8d:fc:48:c8:65:16:55:43:c7:08:e7:
c6:2d:9c:f9:8e:98:19:25:50:65:a3:25:1d:ba:28:
d9:1c:4f:ab:0e:22:db:67:56:3b:0b:63:cf:a2:34:
e8:a8:10:38:bf:16:b5:b6:e6:81:a0:40:13:58:90:
2b:65:0c:34:7d:c9:be:7f:0a:6f:86:0a:3c:68:03:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:C2:3C:65:FE:A4:BB:0D:CC:5E:D8:56:52:04:87:43:3C:B8:5A
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0a:88:6f:c5:a5:3f:ff:3d:9a:74:7f:8a:4c:4d:6b:f0:1e:
8d:7c:ae:8c:58:ae:60:5e:2f:74:ee:68:f6:b8:02:46:e1:33:
37:d2:87:bf:02:a2:11:4d:00:3a:58:09:67:30:66:e2:cc:4c:
5c:32:2c:9b:a5:f3:bc:2a:e3:8f:9a:91:6e:fe:a2:93:5a:a6:
cd:9c:89:ef:f3:6f:f7:95:4a:23:52:14:fd:09:9e:27:24:cb:
52:88:88:92:c8:f4:8f:71:98:f0:0a:14:67:f0:40:20:f4:4c:
d6:44:e1:ea:30:30:c1:02:66:9e:c0:49:94:da:a0:7d:89:a2:
30:cc:32:1d:6e:a5:74:6b:f4:85:52:fa:23:13:1e:f3:02:f2:
3a:0f:7b:29:e2:7e:0e:a4:70:41:65:a7:34:14:47:86:2f:e0:
e2:ea:fc:98:b0:59:6a:e0:24:fc:49:ec:d9:05:41:a7:d8:0a:
39:30:31:f6:94:6c:2f:53:48:aa:1e:3c:55:9d:e5:73:83:50:
0c:e5:0d:e2:10:98:cc:7e:c2:ad:8c:98:4d:6d:6f:44:fc:7d:
ed:7e:33:3e:eb:c5:19:86:44:21:36:b8:3c:96:f2:01:57:ef:
bb:fa:25:89:d4:f0:34:a8:2a:d0:a1:e5:d0:13:f1:e5:cd:4f:
bf:5b:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:40 2025 by rpki-client