Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: P08BhHtoXKr71GNcSajTFn6arNzVa6F7orapY7d03pI=
Subject key identifier: BA:6A:8E:A1:F3:58:DE:D8:D4:D4:8C:61:F5:52:68:FB:DC:A8:00:12
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019849D3652B45ABE2E892EC658B5544408C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 0FFB
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: X0yCFgfzeQnMegnZPQsOleN1ZUpu8zlcQuiBPq1NLbU=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:65:2b:45:ab:e2:e8:92:ec:65:8b:55:44:40:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=ba6a8ea1f358ded8d4d48c61f55268fbdca80012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:0d:7c:3f:2e:a6:65:1f:7a:bf:b8:0d:6e:
78:f8:f2:3b:a3:77:26:cb:33:04:16:cc:4c:f3:ba:
a8:4b:32:34:41:89:1c:64:32:9b:1e:7a:1b:29:bc:
70:b8:27:bc:5d:43:40:3b:dc:08:d3:c6:92:28:29:
1e:58:ac:2a:be:99:3e:b1:29:32:76:a7:0c:54:bc:
9b:ce:91:fb:cb:39:35:86:62:77:a9:3d:e3:dc:55:
26:5f:73:ad:2b:4d:88:4e:49:ff:fb:35:0f:b1:bc:
dc:98:57:07:c9:66:00:e4:cf:a8:e6:cb:b8:91:b5:
2f:b8:bb:9d:1e:20:25:f1:4b:3d:bc:58:75:11:fe:
0c:e9:47:5d:d8:e0:3f:17:23:cd:7b:d3:8f:a1:6a:
01:fe:90:82:5c:85:a8:66:11:cf:c9:d2:12:da:12:
ca:d7:83:ba:42:d0:2d:1f:46:9d:63:e1:1d:31:25:
7b:0b:17:55:b1:87:76:b1:07:8c:97:65:b4:27:18:
41:88:0d:5b:d9:53:7e:9e:e8:6f:4e:21:51:fb:6d:
87:3b:53:85:0b:7a:2d:68:a2:85:e9:49:8f:27:70:
85:72:22:81:73:a8:55:41:3b:e1:45:96:53:29:f3:
99:86:5e:93:18:ba:79:1c:79:a7:6f:05:7c:aa:07:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:8E:A1:F3:58:DE:D8:D4:D4:8C:61:F5:52:68:FB:DC:A8:00:12
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a6:c9:05:1d:dd:9a:09:c1:50:85:77:3d:e0:ba:24:3b:ae:
28:05:5d:34:5c:c6:7f:6d:80:d2:8c:84:a2:b4:fc:c7:09:f9:
df:26:74:d2:60:25:e2:e8:60:77:ed:6e:b4:61:c4:bb:8c:cf:
3a:f0:c2:85:18:4c:50:06:8d:b3:bf:c5:1a:90:94:10:79:bf:
36:06:a5:fc:a3:d0:16:a2:cc:9d:15:3f:bb:dd:e4:5c:9d:b3:
98:76:3c:e7:6d:3e:9a:58:50:09:66:47:4d:f7:97:b2:6e:9e:
ad:bc:c8:5f:41:ce:03:65:42:34:04:68:28:aa:48:de:99:b0:
6e:1c:7e:ce:f6:26:1a:82:7f:01:91:bc:5f:6a:af:73:67:31:
c9:d6:cb:75:a0:13:d6:34:1b:79:cf:bf:8c:41:5b:00:35:27:
2f:ea:95:a1:b9:97:20:12:a0:66:20:e2:16:50:9d:af:08:20:
e1:47:a3:37:e5:9c:76:23:0f:3d:03:3f:b9:36:8b:ce:20:2c:
73:ee:a7:d7:ef:f8:41:79:f8:6e:bb:0d:ff:e0:99:29:fb:3f:
07:09:40:c8:30:ed:d1:46:9c:c1:d2:41:67:8c:3a:0a:64:e8:
40:52:7f:10:c8:53:48:ac:19:ac:dd:f0:7d:01:fe:5c:e4:56:
43:00:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:16:56 2025 by rpki-client