Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: nQc7kVmfb2or+Kj/iizV21Rx3vXpziY1iIrtIrUyUhA=
Subject key identifier: 8F:04:B1:E4:4D:DA:8C:EE:B5:C0:25:5B:57:9E:A0:57:07:1E:98:5D
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019848C0E10E8B775674B3CA0185EEA9281E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0B23
Signing time: Sat 26 Jul 2025 22:00:56 +0000
Manifest this update: Sat 26 Jul 2025 22:00:56 +0000
Manifest next update: Sun 27 Jul 2025 22:00:56 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: MzqIyfpgvxkMBKOgm2G05i5SnoReaeuOSZAxMee4+VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e1:0e:8b:77:56:74:b3:ca:01:85:ee:a9:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jul 26 22:00:56 2025 GMT
Not After : Jul 27 22:00:56 2025 GMT
Subject: CN=8f04b1e44dda8ceeb5c0255b579ea057071e985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:8e:d7:80:2c:33:3e:c4:eb:98:d5:d9:92:
8b:c2:c6:27:19:e7:6d:8c:2b:aa:5e:b5:b8:bf:3c:
50:7f:d8:d7:ea:ba:6a:24:d8:fa:50:1f:83:ff:38:
69:d8:f9:56:03:36:3a:9c:67:2d:c5:68:1e:d5:40:
43:12:63:45:e0:a8:72:da:69:16:02:58:5d:ee:f7:
ee:e4:16:b4:fa:79:bc:1d:aa:78:60:15:7c:2e:2f:
8e:3b:ee:9b:52:ec:1c:37:79:07:55:7b:c6:b5:4a:
d3:f9:fe:cb:3b:97:71:02:30:42:8e:ea:1d:03:8d:
30:9b:12:aa:2b:96:dd:a9:02:12:76:cb:fa:5e:f0:
25:df:25:5a:de:12:16:9f:29:a0:47:46:6e:d4:82:
e2:1a:45:a5:dd:e1:8f:2d:6f:09:7b:3a:87:bb:61:
fd:d4:aa:8a:ec:c2:d4:59:41:73:20:07:ed:eb:5f:
74:57:9e:94:95:b4:47:30:d6:b4:3a:9f:f3:c0:c5:
26:f2:5e:0f:13:ef:3c:23:3f:e7:a0:c6:70:48:cf:
18:7d:cf:dd:6f:bb:4e:b7:d7:d1:94:2c:e0:fd:8e:
46:de:af:77:c2:32:f3:26:21:72:95:a9:06:0a:13:
01:ed:ad:a1:ca:f5:9e:d6:cf:17:7a:96:ae:9f:a4:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:B1:E4:4D:DA:8C:EE:B5:C0:25:5B:57:9E:A0:57:07:1E:98:5D
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:e6:35:95:ad:4f:a1:65:3e:13:51:d1:0f:d2:c5:e8:33:
92:e0:99:d9:30:31:ec:e0:0b:bc:ca:80:da:2b:ba:1d:d4:7c:
23:70:01:0c:ea:62:3f:b2:d4:d0:61:02:5f:2f:c6:0f:96:67:
97:d2:0f:0d:68:49:f8:d3:03:20:77:3f:ad:71:a8:0c:ad:05:
fd:de:ea:b2:50:36:19:2b:e0:cd:a0:c5:9d:db:1b:f1:9f:3a:
c5:dd:4d:01:38:69:b0:29:73:c9:b6:26:95:71:e3:02:94:f9:
b1:01:8e:4b:b7:8f:36:a8:8f:31:7b:26:fe:60:91:05:b3:f8:
2a:80:f0:4d:39:56:49:28:47:2b:3e:3b:7c:6a:81:9d:58:24:
cf:ff:08:e3:62:dc:b8:22:c3:3c:41:c6:71:16:79:a6:0e:9b:
02:2f:d4:f8:cf:93:86:74:a1:35:9c:b2:e4:0a:cd:57:ef:0d:
96:eb:70:da:07:b8:35:fe:37:7b:9d:b3:60:d0:15:36:fb:17:
1c:f7:d8:eb:e7:ab:c9:6c:b1:0a:ae:bd:db:af:6b:a8:a8:17:
d2:ae:ac:ed:02:e2:90:a1:a1:14:b3:33:b8:da:49:2a:82:78:
95:63:1d:5b:14:45:b2:b9:b0:37:43:27:87:fb:d8:bf:e6:4f:
69:cb:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:15 2025 by rpki-client