
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: XdJ0L4Gcob+GX/GLT+Hg0gHD2gfGA+QZQjHXU6SgE7U=
Subject key identifier: B9:13:48:99:BD:89:6E:D2:3D:F4:33:00:80:82:CE:74:80:A6:0C:BA
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01984AAE999E7FE3BF228509C6A3B835FF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0A72
Signing time: Sun 27 Jul 2025 07:00:13 +0000
Manifest this update: Sun 27 Jul 2025 07:00:13 +0000
Manifest next update: Mon 28 Jul 2025 07:00:13 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: R9KxtZRQ7ZLFMiuUePWENX2W9kYl3m4reBF4vRBXUaQ=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:99:9e:7f:e3:bf:22:85:09:c6:a3:b8:35:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jul 27 07:00:13 2025 GMT
Not After : Jul 28 07:00:13 2025 GMT
Subject: CN=b9134899bd896ed23df433008082ce7480a60cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:3b:95:95:8e:a0:df:07:d8:a2:f7:24:a2:
6d:11:eb:1d:e0:c6:88:9f:ab:3d:f2:73:23:bc:f1:
10:61:ec:6a:b9:e5:13:bb:6a:71:e3:fc:1e:f2:7b:
e5:e5:dc:1b:37:94:30:db:46:b1:d8:54:87:b3:a0:
31:94:f0:0e:b7:86:7d:d9:1b:28:c0:78:5b:18:88:
cf:c4:82:28:17:4a:fe:61:c0:41:87:49:75:c6:de:
0e:7e:b4:1b:85:7b:ad:43:1d:fd:a3:b1:b0:8b:b6:
5f:de:b2:97:a7:04:a1:db:c2:b0:2e:a1:87:c0:3d:
3b:c6:7c:8d:97:ac:73:f1:e1:2d:f6:00:78:39:f8:
0f:3e:64:50:ba:fa:d8:67:88:90:bd:9d:33:10:ba:
15:b2:27:99:4c:de:9f:81:de:38:c2:54:de:10:72:
f8:9e:09:be:c4:d1:77:ea:c1:3e:54:81:fc:fa:17:
fe:b3:3c:e8:18:48:39:79:af:0a:36:97:14:b7:2c:
1b:13:e3:ad:05:32:77:ba:a6:06:6b:2a:18:4d:1e:
ea:ed:a6:52:fa:30:8f:74:f9:63:d9:a4:29:e1:bb:
2c:5a:bc:fa:34:27:09:c3:bc:9a:47:e0:c9:ef:72:
5b:ab:a0:f6:5d:f1:56:17:e5:97:4b:65:66:29:3e:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:13:48:99:BD:89:6E:D2:3D:F4:33:00:80:82:CE:74:80:A6:0C:BA
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:05:33:17:62:e9:34:4b:58:8e:4a:2a:f5:24:11:43:21:4d:
8b:86:3a:5b:23:91:8f:3d:47:9c:71:fe:47:03:c2:6b:c2:bf:
51:d0:a7:b7:47:1e:ef:ba:6f:47:20:b0:34:cc:85:eb:7b:64:
91:3c:24:8a:d7:08:15:33:ae:47:bf:d8:c2:6b:6f:6c:98:14:
b8:33:52:c9:7d:be:5d:75:53:e9:7e:60:5b:ea:cc:a9:36:da:
c0:cd:62:6c:15:78:f2:4f:42:94:54:fe:5e:d5:b2:e7:48:51:
ae:2b:dc:0f:4e:6c:27:23:fd:a2:5b:30:c5:d0:7d:8e:d5:eb:
37:43:ed:58:48:c5:bd:e8:0f:54:65:07:91:ee:e4:0b:23:a5:
e6:9b:a7:d8:e0:8c:75:ee:34:97:da:0e:a6:1f:42:07:31:cb:
e6:a6:f9:60:d0:66:a1:59:7e:53:a8:5b:94:5f:7e:66:31:12:
c4:a2:79:4e:4d:d5:ab:e8:d6:01:09:ff:43:f5:9a:6a:ec:b9:
41:3c:b9:9f:76:d9:bd:55:df:7b:ee:ad:bf:4e:a2:28:af:cd:
0a:84:c6:2e:4f:ab:32:ba:dc:b0:e2:da:83:29:f9:d5:65:0b:
02:6a:97:e6:d8:f7:ad:f0:8c:85:fc:49:81:ec:dc:89:bb:99:
e4:bd:f0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:05:49 2025 by rpki-client