Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: lPDJhw9nwSiwMVGLAVYJkdFR++xtSGHNTBDuIkqNAkk=
Subject key identifier: 5B:D6:9D:F7:5B:5E:D1:AF:82:44:90:3A:FF:8B:C0:24:07:6C:4D:46
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019847AD7260A93BEE14F9E2877C04AAC547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0DD3
Signing time: Sat 26 Jul 2025 17:00:05 +0000
Manifest this update: Sat 26 Jul 2025 17:00:05 +0000
Manifest next update: Sun 27 Jul 2025 17:00:05 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: U5TvTU6t9NXwLRe4n173k4t7v5uScom+0KBKvZTRYdE=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:72:60:a9:3b:ee:14:f9:e2:87:7c:04:aa:c5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Jul 26 17:00:05 2025 GMT
Not After : Jul 27 17:00:05 2025 GMT
Subject: CN=5bd69df75b5ed1af8244903aff8bc024076c4d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:25:fe:8c:f6:0a:14:5b:f3:c8:b8:cd:d7:
7f:8f:0d:2f:11:de:9b:aa:84:36:8c:fb:7e:3a:3f:
a8:e2:8d:fb:5e:ce:9f:0a:d1:d9:1b:3f:f1:9c:8d:
cc:4d:53:ba:f2:72:96:db:e8:f6:7b:8f:d0:44:3a:
4e:87:0b:47:b7:5a:1c:79:7a:ba:c6:55:99:71:4b:
d6:b8:b2:60:21:1e:fa:f6:a1:9d:65:59:01:32:ac:
90:b2:84:c0:2f:38:08:cc:62:2b:2e:d4:04:9d:48:
d6:0c:2c:03:4b:1b:7d:71:2e:87:5a:73:69:94:ae:
f7:eb:3f:eb:ca:2c:fd:bd:cc:dd:5e:3b:03:65:b7:
16:d5:b2:68:71:2c:0e:74:7e:4e:1b:79:51:bb:10:
e3:94:90:61:2d:aa:2c:a2:57:cd:2c:b3:e7:d6:89:
89:c9:9e:e4:32:ff:df:7d:b6:48:59:a7:4b:66:5d:
1d:d6:01:0a:44:99:17:5a:03:35:71:ff:41:0c:64:
29:a0:ce:9a:5b:a5:fd:6b:02:cc:14:39:be:37:e6:
8c:f3:3b:37:11:b9:be:61:2f:04:71:b3:9b:1a:b7:
ea:19:b3:9d:5a:d0:2d:3e:7c:35:63:23:6f:b2:d4:
02:43:f6:73:ae:3d:86:93:11:c9:f0:f9:75:22:48:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:9D:F7:5B:5E:D1:AF:82:44:90:3A:FF:8B:C0:24:07:6C:4D:46
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:d1:7b:37:63:02:b5:c2:c9:d7:96:c1:7e:d4:d8:48:98:
fe:13:e7:3f:4c:ac:4f:a8:b7:15:62:c1:83:7d:00:e0:e2:dd:
1f:63:de:7f:80:20:29:ae:ad:1a:03:f1:9a:09:d4:49:89:34:
54:91:85:64:f4:17:07:6d:9e:ec:cc:8a:7a:a2:b8:7f:5b:fe:
5c:73:fd:ef:73:78:ea:e3:81:25:99:aa:9e:8c:2f:cb:77:a6:
ce:2d:9a:28:01:6d:7c:f0:6e:d5:f1:25:47:e5:cd:a0:61:75:
e1:2b:a7:b7:e9:5d:26:65:8a:55:8f:81:37:a1:f8:4f:0e:94:
90:69:5a:42:b3:ca:b8:d9:c9:3a:37:c5:4d:96:e4:a9:2a:56:
9d:a7:67:ac:c7:71:23:8a:a9:7c:76:d7:6d:82:e1:51:54:ed:
c8:ae:92:46:79:87:5a:b0:95:d5:f0:96:97:49:37:80:ed:9e:
d0:69:fd:5d:77:a3:d5:60:bb:59:8a:58:04:28:73:e2:a7:30:
f4:72:82:8b:a8:7f:f8:fc:02:b0:87:20:fd:e1:28:e7:ef:19:
15:1f:6d:e1:d7:90:02:f4:61:07:c7:03:27:c6:fc:a6:6f:36:
63:af:3c:23:f8:6c:43:89:6b:ea:34:ab:41:f7:27:2c:3c:4a:
19:41:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:09 2025 by rpki-client