Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: ZFGz08t/fy1gMECRKq/a0fswShtjo41/Hoh6q9X7mOM=
Subject key identifier: 73:A7:E3:0A:C8:D7:01:59:E2:48:B1:43:20:DC:DC:22:F3:9D:9F:6E
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 019846D20D0394E6FDB2472061D5A3B8B6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0DCE
Signing time: Sat 26 Jul 2025 13:00:27 +0000
Manifest this update: Sat 26 Jul 2025 13:00:27 +0000
Manifest next update: Sun 27 Jul 2025 13:00:27 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: b19Rjha+4TSZVRVfblTFa/GNKo5grndsnuLL66bPcic=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:0d:03:94:e6:fd:b2:47:20:61:d5:a3:b8:b6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jul 26 13:00:27 2025 GMT
Not After : Jul 27 13:00:27 2025 GMT
Subject: CN=73a7e30ac8d70159e248b14320dcdc22f39d9f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:d9:bd:9b:a4:79:de:c4:12:ef:10:80:f1:
22:e2:40:94:0c:35:96:f0:02:ca:bd:9f:67:18:07:
28:60:ac:c7:11:92:3a:91:5a:1d:5e:38:2c:4d:db:
69:a9:f0:c2:22:37:0c:33:6a:62:0d:83:e3:2b:20:
b5:7f:64:f7:55:da:b6:6a:e5:ba:07:c0:c4:0b:8c:
08:6b:ba:87:10:5a:95:d5:a2:51:b3:99:32:96:11:
63:bd:54:15:57:30:34:6e:3e:60:18:a5:f9:cf:52:
75:54:03:96:13:12:80:b3:c2:dd:0b:7d:50:ab:1c:
56:eb:ec:90:a3:06:eb:21:5e:2c:a0:a0:12:de:02:
b9:d8:4a:25:a6:1d:d2:7f:6c:48:f2:fa:72:51:ac:
7e:79:68:17:18:b2:5e:1d:b1:a3:61:bc:96:0d:28:
30:d6:fc:e4:94:2a:2b:1b:05:90:a3:c9:79:82:57:
79:32:ee:99:ad:46:3c:90:ba:20:46:a9:77:cb:6f:
49:d1:1c:48:07:fa:73:ea:87:db:39:49:fb:78:ed:
ee:8e:42:f5:7f:3f:9c:be:a7:d1:42:ae:8c:59:3e:
d7:7c:1f:cf:21:9f:ae:41:6a:2a:56:9f:e4:73:c9:
ca:9c:16:39:a8:17:ef:cd:38:35:34:0f:f2:12:14:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:E3:0A:C8:D7:01:59:E2:48:B1:43:20:DC:DC:22:F3:9D:9F:6E
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6c:f6:98:2a:62:72:e2:c9:77:14:7e:10:40:65:9e:0f:72:
96:59:a7:46:67:14:8b:aa:ef:ac:16:ed:5e:7d:0e:6a:fe:64:
d0:46:bd:06:e4:0c:cb:71:e1:1e:58:bf:39:71:fa:8d:2e:78:
b6:43:55:3e:4e:65:8c:d3:e0:15:3e:e0:66:8b:81:80:bd:5a:
5a:c6:22:36:2a:76:a7:5f:c1:1f:11:94:f8:3c:84:71:76:38:
69:e0:c5:af:25:ac:2a:cb:4f:b6:67:49:23:ad:4f:94:59:20:
26:22:d5:d5:c3:c2:50:40:b9:90:63:22:12:ba:88:6d:63:6c:
16:6e:48:d5:90:31:c8:5d:d4:91:2a:b7:50:9b:96:63:6b:30:
bc:26:03:9c:30:3c:d0:2a:ae:be:15:06:6c:b0:72:ce:8d:03:
92:a2:1f:47:5c:28:e3:ee:7c:fe:8c:5e:78:d5:d7:28:6b:e5:
9b:e0:07:6b:e8:72:bb:74:d4:18:6f:e6:24:c4:c1:5d:55:10:
94:0b:91:9b:26:01:b7:57:93:8c:e7:41:7b:c6:6b:15:5c:f7:
d9:80:fb:6d:13:8c:d1:9b:ce:fd:c1:10:c8:be:c1:02:24:3b:
11:79:7b:10:24:95:e5:6a:fb:d1:b3:80:d4:cc:b0:d4:7c:b3:
2d:0e:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:11:39 2025 by rpki-client