Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
File: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft (raw, json)
Hash identifier: Yw7RDWZ7EkGkpOuCJDeuI9r60jT1sF50xO473cq1PWE=
Subject key identifier: E6:15:DD:AD:69:F6:BD:0D:7B:C5:CE:22:9F:B0:40:F4:5E:9F:57:16
Authority key identifier: E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
Certificate issuer: /CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Certificate serial: 0198572112A02BA516F4DEEE580496F25A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
Manifest number: 0C8D
Signing time: Tue 29 Jul 2025 17:00:41 +0000
Manifest this update: Tue 29 Jul 2025 17:00:41 +0000
Manifest next update: Wed 30 Jul 2025 17:00:41 +0000
Files and hashes: 1: 5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl (hash: nt9B+FMJ6aW1//36dUwtg9zyywLRyynWyAcaneDjRXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:12:a0:2b:a5:16:f4:de:ee:58:04:96:f2:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52cb85ca793fad565b4608e26d82a6ae27dc232
Validity
Not Before: Jul 29 17:00:41 2025 GMT
Not After : Jul 30 17:00:41 2025 GMT
Subject: CN=e615ddad69f6bd0d7bc5ce229fb040f45e9f5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:b5:61:d1:e4:fa:9b:97:31:d1:dd:25:d4:
02:bf:c0:79:9d:ad:32:d3:c9:91:ef:8a:23:74:77:
a0:c4:11:80:9d:c2:95:13:c0:51:28:06:50:f0:cf:
45:a5:54:62:88:65:d2:94:31:b5:e2:5b:ad:62:88:
2b:22:cc:a7:31:57:54:86:ad:0b:47:92:60:99:bf:
3d:68:67:31:93:31:76:93:63:4e:39:ae:2a:9c:2c:
29:60:59:d0:75:f2:2b:fd:bc:5a:fe:0d:3e:01:6a:
06:61:c9:5b:84:75:46:48:97:4f:fe:62:88:d3:a5:
25:dd:b9:92:04:ad:4d:04:b8:0f:22:7c:61:7e:ae:
2b:2f:a2:37:94:13:9b:14:fe:39:3d:23:d6:92:e8:
b8:60:0a:4e:92:27:60:e8:69:5d:88:89:90:4a:b7:
10:7a:43:d0:ef:b6:ea:cb:f8:c5:eb:91:dd:db:ee:
6f:72:53:35:78:c5:fb:aa:5f:26:93:b5:3c:78:cc:
a9:40:ce:2a:65:2b:12:77:3f:79:ad:5e:d3:57:3c:
60:6f:e4:64:40:05:e0:8a:fc:33:51:03:31:4c:60:
85:04:4b:6b:65:02:54:24:b2:8c:6c:f3:b7:b0:67:
cc:75:bf:e6:02:bc:30:95:a7:7f:a1:58:f8:cf:50:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:15:DD:AD:69:F6:BD:0D:7B:C5:CE:22:9F:B0:40:F4:5E:9F:57:16
X509v3 Authority Key Identifier:
keyid:E5:2C:B8:5C:A7:93:FA:D5:65:B4:60:8E:26:D8:2A:6A:E2:7D:C2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sy4XKeT-tVltGCOJtgqauJ9wjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/95bad9-20fe-4b8d-8f03-9c2999d09b8f/1/5Sy4XKeT-tVltGCOJtgqauJ9wjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:0f:3d:bc:21:18:fd:e4:d3:02:7a:2b:16:a0:73:c4:e9:
0c:8e:3b:af:d7:cd:90:07:e0:88:32:a3:41:ed:1d:89:eb:8e:
b7:38:fd:11:99:0c:ba:d0:e9:3b:75:39:48:d7:23:1f:b8:4a:
73:3c:ed:71:83:74:88:6a:7f:c7:93:63:95:cb:40:96:c5:7a:
71:bc:e2:9a:4d:f4:b5:10:de:62:85:60:ea:66:54:c7:94:e9:
d3:16:30:07:5b:63:ca:7f:ac:d2:2d:5d:cb:a2:04:28:44:95:
3a:93:2f:ef:02:2e:bd:c8:da:e7:32:38:5d:4d:32:48:9a:62:
b8:80:8c:04:a9:8d:e5:7d:69:34:91:2d:9b:9a:dd:63:ea:af:
8a:ed:f0:92:d7:ac:d7:38:2d:b4:99:3c:04:e5:e9:57:c0:25:
f0:3f:3c:6d:17:35:d5:f4:eb:27:cb:05:d0:12:21:13:12:26:
5f:6c:95:02:78:c7:08:e8:13:01:56:83:6f:cf:65:bb:60:33:
33:c6:8b:40:74:8d:60:74:b6:88:7f:20:b5:4e:24:c1:63:08:
bc:32:0d:e0:d4:21:93:a9:ba:88:46:a8:5b:36:9c:c3:3d:50:
24:34:28:73:a3:d1:3d:3e:a7:b5:99:03:23:1c:80:8e:9c:b8:
c7:92:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 21:32:00 2025 by rpki-client