Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: YJISDVtzaFInCKu/tlPMKAjasMSzqHwcQIgPefenDns=
Subject key identifier: 09:7B:A9:1A:CF:4F:4D:1E:33:B8:D4:7E:6A:7D:12:83:05:82:C5:8A
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0198488959ADCFDAB2EF377B6F9B863591DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 052E
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: dZLvfpKyT+spPSTSs9sw3lXEM1iwK/zlgtbAZf7tM5o=)
2: XdhbDlsmi-wLrPkew-d4TMCD4uQ.roa (hash: GZ7CAjXYNkyYQQ/5CpNjIQ4FPx45ItKMUE3PHSgxPGM=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:59:ad:cf:da:b2:ef:37:7b:6f:9b:86:35:91:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=097ba91acf4f4d1e33b8d47e6a7d12830582c58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:c1:24:ab:62:b4:f0:68:70:57:46:fa:2d:
ff:7b:11:8e:6d:ca:f1:fe:74:80:78:43:ff:a7:36:
6c:e3:bf:a5:90:fe:20:1a:a9:10:ee:4c:c3:8c:f4:
bb:95:38:a0:1c:1a:aa:35:21:31:78:e4:0f:88:7a:
fb:30:b0:79:32:6c:e6:34:df:01:76:2e:44:c5:a3:
15:9d:2d:ca:10:90:12:2d:ff:b5:9f:c6:e3:ae:32:
86:a3:df:7c:f3:18:61:ce:96:af:e0:96:87:37:7c:
4f:69:a2:41:4c:bd:c6:9f:e9:24:6b:81:33:5a:a2:
e7:9c:4b:c4:9b:ab:81:a0:b2:23:d2:a8:db:58:be:
c1:c8:ca:1a:16:a8:08:88:24:a9:97:20:6c:7e:4c:
c4:b9:de:9b:c2:1b:24:b8:e9:24:21:63:89:f8:75:
26:5e:fc:e0:37:2e:15:93:7e:0e:4c:16:b7:24:50:
9d:dc:f3:5f:a8:cc:7c:3c:0d:a0:e6:bf:18:9b:90:
9b:1b:ec:c0:23:58:24:52:5c:bb:04:f7:80:e1:c4:
9f:21:10:7f:b5:c2:75:36:78:03:58:8c:ed:58:49:
ad:98:66:81:aa:cb:47:44:7f:cb:8c:93:95:a9:41:
84:36:15:15:69:bf:85:be:90:8c:a2:5c:62:ad:84:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:A9:1A:CF:4F:4D:1E:33:B8:D4:7E:6A:7D:12:83:05:82:C5:8A
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:b2:a4:c5:c8:19:f8:9d:c1:09:06:6d:24:c4:a4:ce:10:
cb:e7:39:b0:b9:6c:4d:f1:58:0b:c6:02:71:06:a1:4a:a4:e7:
b8:b9:6e:f0:c9:36:fa:f4:97:56:06:1e:84:bf:53:c6:fb:43:
9a:92:54:57:93:30:7a:f8:8b:08:d8:2c:a1:29:a9:77:18:80:
95:ad:22:47:18:b2:26:bb:9b:d4:df:4b:48:ab:e8:a6:97:ad:
be:c3:2b:d7:c4:c0:51:64:7f:3d:0a:e9:ec:97:d2:bc:f6:08:
a8:f1:13:63:1a:9f:76:0b:0a:10:84:b6:3b:8b:a2:0a:66:f9:
c3:75:bd:61:64:a9:2b:60:ab:78:f6:e8:92:88:15:30:94:3a:
b0:a4:23:61:fd:6d:53:22:e2:2a:04:dd:71:88:7f:eb:e3:51:
c8:b1:69:11:72:97:a6:07:58:12:c5:08:4b:b7:5c:1b:65:bf:
f8:ea:ca:8e:f4:ab:6a:1b:02:4a:68:25:5c:5e:e1:c3:0a:ee:
9f:89:e6:bf:42:6d:87:37:93:2b:62:30:ad:54:7d:3d:1a:70:
ac:87:f3:78:a8:8b:fc:c3:e2:12:e1:80:45:54:83:26:e7:3f:
5f:ad:eb:fd:73:37:6e:7e:6f:ad:45:15:7a:6c:ac:4e:9e:c9:
94:ef:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:52:31 2025 by rpki-client