Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier: wTuEb0frAHa6e+R3dRTBDVVowA2mdyEb0ayjmB+N3gg=
Subject key identifier: 5C:3B:72:DF:52:52:43:FC:2F:9C:16:E2:AE:E7:E6:3A:0C:98:3E:41
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 01984A0A404A38285F72AFE022531820C46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number: 04F5
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: DlYJgXUKlzo+xZYrTq6hLCUAvl/qtRLYp/x5ztr1WkM=)
2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:40:4a:38:28:5f:72:af:e0:22:53:18:20:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=5c3b72df525243fc2f9c16e2aee7e63a0c983e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:57:6d:1a:d9:e7:8c:9c:cd:60:3a:96:ec:
4d:05:cd:04:13:67:7c:b6:7c:b6:4f:f8:07:82:c9:
a6:9f:12:92:c8:8e:7c:21:57:e2:d3:1b:d7:7e:7c:
2a:d6:6a:f2:4e:fa:0e:09:db:09:24:b6:fe:53:55:
c2:5c:3e:92:1d:b9:3e:23:a6:cf:d2:be:ab:9e:52:
97:10:0d:e8:43:a5:1e:46:c8:3e:55:a4:9c:46:74:
9f:10:83:1e:56:6e:de:13:8a:b4:ad:9b:11:20:af:
db:bd:f4:19:4e:48:c3:09:a0:5b:eb:0f:81:58:2e:
74:b2:e4:70:a6:61:b3:ec:0f:a7:ad:a1:1a:66:94:
70:47:28:c7:b8:60:25:5a:ef:13:9d:9c:ea:33:bc:
a8:22:6b:f3:81:32:eb:6f:1c:1a:0c:25:55:06:4f:
c0:a2:67:04:44:58:82:e1:f8:6b:6d:b2:08:53:3c:
70:53:91:cd:ba:66:e1:87:0f:84:6b:8a:aa:f3:fd:
38:62:0f:6d:0d:df:1a:17:3f:f6:05:f6:76:72:1b:
c7:7f:8d:31:e1:a5:f9:86:b1:29:e4:83:dd:2b:96:
f7:8a:5c:42:ea:b5:4b:c7:5a:1d:08:23:4d:65:ff:
67:40:74:02:47:d7:ea:70:32:c7:a6:47:6e:88:07:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:72:DF:52:52:43:FC:2F:9C:16:E2:AE:E7:E6:3A:0C:98:3E:41
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2d:0a:52:9a:13:e2:09:35:85:5f:61:c0:53:73:11:29:d0:
4d:4f:ae:21:64:4a:74:28:1f:c0:4f:be:1d:6e:d9:e4:4f:24:
45:14:5d:77:00:86:40:24:eb:b8:77:d6:c5:db:6f:12:3f:0c:
6b:26:7d:2c:63:00:03:60:7e:11:96:00:30:e4:03:2e:d9:ea:
ea:7c:4d:4c:0d:7b:69:1c:5a:72:85:bc:2c:05:ae:71:b2:bf:
01:8f:a1:40:9f:fd:8b:5d:8a:d0:9a:73:d2:18:c7:46:07:cd:
75:9a:df:96:b7:2c:59:03:19:f3:f3:b6:c9:2d:e2:c1:2e:81:
52:7f:97:59:7f:27:32:69:20:e4:1b:31:ad:dc:ed:5a:ca:b8:
68:cf:8e:6d:02:98:8d:2c:4a:76:e4:b8:34:72:8b:58:bb:f2:
54:04:4a:28:c6:a2:83:16:d5:82:b9:13:c8:35:89:ce:e3:4e:
fa:02:03:36:2b:ea:d9:0d:0a:de:a6:00:d9:df:3b:0c:86:37:
00:08:07:ac:54:02:37:5b:2a:62:a6:67:70:9a:45:b2:0d:85:
d9:53:e4:a3:d7:43:0a:b5:80:48:4d:cc:10:82:e7:f9:65:78:
d0:dd:e4:d2:0d:00:a9:a3:41:0e:8a:4d:a7:39:7c:87:82:31:
bd:8a:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:23 2025 by rpki-client