
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: ptUUShVVtMmPX4VM6tWR5ku47ZqFdcIgU4a+VH6ZeGY=
Subject key identifier: E5:2B:E8:FD:86:06:24:8E:20:00:74:C6:B7:FA:A9:82:71:66:F0:1C
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 01984407E917681FE6FB6F3D94B7602C3572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 0689
Signing time: Sat 26 Jul 2025 00:00:25 +0000
Manifest this update: Sat 26 Jul 2025 00:00:25 +0000
Manifest next update: Sun 27 Jul 2025 00:00:25 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: bzMY1oA4vwaaw5mWEuVqjZYCUbILJxs+AgQIlktZ0Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:e9:17:68:1f:e6:fb:6f:3d:94:b7:60:2c:35:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Jul 26 00:00:25 2025 GMT
Not After : Jul 27 00:00:25 2025 GMT
Subject: CN=e52be8fd8606248e200074c6b7faa9827166f01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:c3:d9:8e:10:8c:38:48:22:41:26:9c:f4:
06:d1:f5:3c:d5:66:6d:1b:9e:04:e5:2e:82:55:de:
b1:53:24:38:66:df:4b:aa:be:f5:72:03:b6:1e:0f:
ca:88:e2:67:f2:51:a3:db:d8:80:ac:4f:22:7f:79:
d4:75:54:a2:2d:2c:76:7c:4d:94:04:53:16:4d:81:
6d:33:f2:80:86:34:19:d9:9a:86:a4:5c:59:fe:ef:
c3:eb:1d:a1:50:19:dc:f6:1d:ea:2a:49:c8:51:12:
72:ba:ea:dc:26:a7:6c:2a:b2:b3:3c:ff:94:cb:6e:
e5:05:9a:b0:cb:36:a2:21:cd:e5:ee:dd:c5:87:c6:
56:1b:90:85:a6:d7:f0:fb:8f:9b:87:95:12:11:37:
f6:ce:9e:38:46:c6:5d:7b:6d:e5:e6:6a:9a:a1:39:
30:2e:d9:42:cd:ef:34:93:0c:56:8c:5f:68:c8:e4:
00:3a:60:57:e8:be:e4:b8:ef:c6:2a:2e:c2:a7:e6:
8e:56:58:10:bc:8a:8a:7f:ba:1f:3e:00:ef:ab:33:
5d:86:89:b7:ef:2d:7e:84:cd:29:32:02:02:94:73:
4c:d0:71:a5:96:42:e4:07:e3:45:9b:42:7a:39:05:
8e:13:00:3d:19:af:35:08:fb:87:5e:5e:44:1c:53:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2B:E8:FD:86:06:24:8E:20:00:74:C6:B7:FA:A9:82:71:66:F0:1C
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b6:cb:89:6f:ab:bb:7c:a9:9a:ef:46:0e:8a:62:3f:6b:9a:
05:f3:4b:62:ee:32:1c:7a:fc:1a:93:a4:56:f0:84:cd:1d:94:
4b:f9:d4:ee:a5:58:d8:1c:b9:4f:05:43:9b:99:12:eb:d6:fe:
c1:d3:d8:1b:2b:0d:21:82:14:23:66:b3:c1:22:50:bf:cd:93:
ba:fe:09:4f:0d:2f:6e:23:ae:73:91:19:b1:88:46:ff:35:92:
03:12:8c:2f:d8:3f:4b:b2:33:f8:a8:af:cc:d8:98:dd:a7:75:
f5:84:6f:d1:f8:d8:35:89:98:9d:72:a4:e2:cc:de:c9:a6:95:
75:08:6f:98:1f:82:7e:a7:98:28:74:05:30:40:5e:b8:e5:e3:
23:db:c5:87:44:fb:21:fe:b9:0a:9e:b3:22:b0:ec:41:15:23:
e5:c9:23:11:81:4c:f7:64:85:0e:d1:eb:21:6e:e0:d9:e2:7b:
0a:f6:19:35:97:3d:69:2b:97:21:a9:0f:51:92:b3:d2:16:79:
e1:cb:40:73:1d:dd:cb:1d:87:e0:31:0a:58:7b:f7:a6:0c:af:
08:42:c7:74:fb:90:bd:25:ea:bf:fb:30:8a:97:12:12:cf:e2:
1b:4d:28:6e:94:b3:49:c3:8f:e9:f1:69:80:b1:6e:08:a9:78:
c5:b8:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:15:41 2025 by rpki-client