Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File: 5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier: oINqgwwJtsmpTeA20g3PpsjWy8aTVT9+k6HS9hKXrVQ=
Subject key identifier: DE:BB:CD:4C:85:38:C6:83:7D:3F:97:79:A1:94:05:69:EA:99:7E:96
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 019922C388741792F4B954CDB762315DB9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:03 +0000
Manifest this update: Sun 07 Sep 2025 06:01:03 +0000
Manifest next update: Mon 08 Sep 2025 06:01:03 +0000
Files and hashes: 1: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (hash: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=)
2: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: XKFDlox/wtnvooiJhBgjPX3l20nn3inFN8GoUmRNHnI=)
3: FkwWWQIMWtA4iybPzQx4iJn4LA4.roa (hash: dygheTAaWRRRFFcR/Y94QKMdhM+IdtEOUxFApI6osJI=)
4: nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (hash: aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:88:74:17:92:f4:b9:54:cd:b7:62:31:5d:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Sep 7 06:01:03 2025 GMT
Not After : Sep 8 06:01:03 2025 GMT
Subject: CN=debbcd4c8538c6837d3f9779a1940569ea997e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:13:1a:5e:c1:f5:23:c7:b9:92:ff:94:a7:
e2:4b:b8:23:91:c8:54:e8:61:33:e9:78:39:b7:b1:
8c:5c:d1:28:6d:49:57:51:71:a2:68:b1:08:c7:18:
ed:6d:3c:c8:8a:81:c6:44:5c:f7:9f:a8:19:08:a5:
27:97:34:34:61:56:9f:25:f9:ad:d9:fc:e3:62:0f:
22:39:a4:41:70:75:6e:6c:d5:9d:eb:83:87:f1:c2:
a4:d3:ed:f8:ec:d1:bc:fb:fc:d0:cf:e2:10:2e:3c:
39:68:7e:61:65:5c:22:58:f0:06:34:0f:88:e3:0f:
bb:86:db:c4:32:6b:12:45:f3:92:bf:6c:82:1f:4a:
18:58:58:54:e3:a4:57:6d:86:ee:f1:25:03:70:36:
8c:1b:bc:00:c9:ad:4b:79:00:a3:0a:4b:60:27:a5:
ad:6b:58:91:5f:4b:8e:48:79:e6:04:d1:5d:c7:43:
ff:89:f7:82:73:79:a1:8b:f4:91:d4:30:22:07:03:
ce:31:75:a2:11:d2:87:cc:e3:8b:20:fe:9a:7f:da:
f8:cf:fb:85:32:e2:2e:46:d6:a2:aa:ad:b4:1d:a3:
b4:98:ef:8a:76:70:72:e5:c4:f3:25:96:43:73:c4:
6b:59:4d:84:f6:f0:54:5a:15:3c:bd:0f:64:4b:b4:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:CD:4C:85:38:C6:83:7D:3F:97:79:A1:94:05:69:EA:99:7E:96
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a4:bd:23:ac:cd:f6:0e:7b:38:3d:a0:d6:ea:11:f0:b4:fe:
49:45:81:d9:5f:79:aa:d7:e2:36:28:0e:e7:5a:fe:aa:28:0d:
7e:a7:e3:cb:ab:15:0f:b5:ff:7b:ff:10:b4:1d:01:b3:fc:15:
54:54:85:b4:a2:74:e6:a8:fb:c1:15:86:29:53:03:ab:13:7b:
9d:55:20:5a:3c:93:fe:b1:24:4e:68:27:75:49:85:f5:bb:e1:
5f:23:19:ff:d9:2f:0c:2a:1c:4e:95:82:56:d0:2f:8b:4f:69:
9f:10:d9:54:70:9e:15:d3:2e:41:33:e1:48:4d:d9:02:7d:9a:
96:ac:07:eb:5c:72:51:cf:52:9d:0a:57:ce:35:b9:e1:b0:c5:
ca:68:b9:76:d1:ce:99:72:fe:6c:89:48:9e:92:17:85:c8:37:
f0:4e:ec:62:0c:90:9b:46:cd:76:a0:36:77:28:97:09:c3:37:
11:c1:e5:85:be:e8:bd:f3:74:ac:ea:cf:2d:15:23:f2:fd:37:
b7:b6:5e:7e:e6:84:e3:d7:b8:2e:8f:d7:a3:ef:94:d6:7a:ea:
3c:f7:80:36:98:19:5d:bc:7d:a0:e2:2b:fc:c7:6a:64:48:28:
1c:2f:f8:dc:6f:f7:63:07:de:0e:67:e6:63:62:24:86:0f:48:
98:88:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:03 2025 by rpki-client