Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: TSOcaCFZSkwOK/uvfC1NluZOqLwSknRxaPzODaYhSIY=
Subject key identifier: AD:FF:BE:0F:D7:F5:DF:E4:23:3E:9A:BA:C0:7E:40:C6:EA:4E:23:80
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 01984E8B68076252DAC280D672DF5C495817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 10C7
Signing time: Mon 28 Jul 2025 01:00:15 +0000
Manifest this update: Mon 28 Jul 2025 01:00:15 +0000
Manifest next update: Tue 29 Jul 2025 01:00:15 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: b/qHm676p+mLgUTNTWiV6jGomey8O87aLHs6dXMTnCM=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8b:68:07:62:52:da:c2:80:d6:72:df:5c:49:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Jul 28 01:00:15 2025 GMT
Not After : Jul 29 01:00:15 2025 GMT
Subject: CN=adffbe0fd7f5dfe4233e9abac07e40c6ea4e2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:03:f8:6e:39:6b:ed:39:65:81:79:37:0b:
2b:8b:fc:7a:b9:24:1a:93:2a:06:54:64:20:55:ba:
64:af:d2:3a:36:75:23:8c:44:a8:e4:30:f1:64:ae:
b5:25:e7:5f:e7:1a:91:18:24:30:f0:78:bd:55:bd:
6b:c1:92:83:56:d8:c7:a4:6a:52:fe:ae:63:e1:fc:
23:1a:75:20:5d:10:3e:fe:69:b1:fb:ed:3e:ed:48:
dd:ff:2b:d1:8b:b0:8c:04:19:c0:e4:0a:ae:c3:d8:
5e:3e:3d:b0:53:35:b2:bd:7c:23:2b:46:1d:15:6e:
59:a6:bf:de:ce:b3:35:d5:01:84:41:23:fd:33:6c:
e1:43:f2:8d:0c:80:4b:47:02:b8:2b:ca:16:7e:6d:
c6:30:6d:07:97:ef:e8:fc:a1:d0:44:8e:e6:7d:62:
bc:24:d9:4d:39:8c:dc:d0:93:87:72:bf:23:4e:50:
17:a9:6f:ef:99:bb:2e:84:d7:c2:b8:72:f2:56:87:
0a:40:fe:13:e0:51:e7:7c:53:d9:82:52:45:7c:84:
00:40:7c:18:87:d8:e7:20:b5:1a:6a:c4:30:9d:93:
8e:83:71:04:08:74:94:4c:6a:6e:45:36:99:89:61:
32:12:4f:bf:4d:90:16:7c:d2:ae:6b:50:90:b8:a2:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:BE:0F:D7:F5:DF:E4:23:3E:9A:BA:C0:7E:40:C6:EA:4E:23:80
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:e4:49:71:b2:5c:0a:87:a0:ab:bd:18:ba:01:b5:54:25:
25:d7:e9:6b:7f:49:2c:02:67:55:91:df:e0:9e:80:29:b7:0d:
cd:d3:63:38:99:5a:84:88:ff:b3:ab:69:ab:e4:12:f0:6c:bd:
20:17:0f:40:fe:93:84:c7:71:01:a0:ab:c8:ba:be:0f:58:ce:
ff:3f:ac:c3:ab:50:c5:25:04:69:97:80:06:cb:cd:35:ff:0a:
16:7f:91:6c:8a:94:5b:57:7f:5b:50:df:2a:ab:c8:5f:50:32:
a7:0a:70:d1:f1:53:16:28:61:49:7d:04:b9:29:0d:7f:55:2f:
ed:3e:39:1c:fa:f1:82:53:20:2a:7b:71:dc:75:f2:21:8b:64:
15:dd:4f:52:23:c4:c2:6f:85:6f:bc:49:54:3c:ab:a8:d4:d0:
48:bd:c0:0b:07:45:26:67:42:1c:7e:e0:04:44:35:4a:93:6b:
92:68:83:40:4e:83:b6:bc:b1:64:65:cd:1e:12:b3:45:a5:c4:
3f:7f:1a:62:94:7d:7c:96:c1:15:bb:ac:17:44:d8:51:2e:47:
15:02:a7:48:5a:63:ce:88:36:ed:fd:44:06:97:62:4a:c4:ae:
5d:ec:4d:ea:cc:6e:60:ec:95:26:e5:19:0a:02:47:79:d6:b2:
46:48:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:45:07 2025 by rpki-client