Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: k2gw1EqzrtklgSwV1nn7f5lYYfdRiIlquB7vFoIEVXs=
Subject key identifier: 88:7E:AE:D5:F9:F3:C5:CA:EE:9F:0F:06:23:85:F6:63:A7:E4:FC:EB
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 01984A41746D7522E745DCC509B178F06F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: s6lUxLdF51vu0/YGfQXNW+29cCOB/05FCnpmfTU6iJY=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:74:6d:75:22:e7:45:dc:c5:09:b1:78:f0:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=887eaed5f9f3c5caee9f0f062385f663a7e4fceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:28:ba:0c:56:07:43:a2:35:c1:02:3b:80:
2b:99:40:a0:9d:7c:6f:b9:04:7f:88:bd:84:4e:4a:
77:c1:7d:79:54:71:1f:c3:c8:47:57:5a:a8:b1:c7:
69:ce:1a:53:f5:28:d7:88:20:88:1a:07:c1:bd:ca:
49:55:9a:c8:80:af:ea:04:85:ba:56:09:ba:ce:b5:
d8:e1:06:52:5b:94:dd:94:24:bf:26:e3:b5:07:9f:
cd:bc:01:2a:17:b0:bc:d7:f8:ce:92:3f:77:25:ba:
a9:47:32:35:99:3c:45:15:58:3f:13:2f:68:ce:7b:
23:6e:a8:99:98:1e:a6:9f:c7:3d:2a:49:57:ba:2e:
ec:56:c1:34:c2:f5:b1:d8:66:c3:b6:0a:dd:22:34:
8a:47:0d:e2:6a:33:64:1c:df:3e:1b:1f:8f:64:1e:
73:ce:b3:0c:ba:72:bd:58:59:3d:0a:31:53:f3:af:
8c:fe:e9:26:ba:f8:50:40:3b:55:a9:8e:61:bd:b9:
4c:13:1b:77:81:f9:1c:61:52:48:1a:e8:e5:77:b6:
54:65:7b:83:bb:0b:0d:9e:0b:0f:7d:cf:fa:8c:22:
cb:06:ed:07:93:d4:f7:2c:95:bb:65:22:7b:09:a3:
4d:59:fc:fc:69:74:47:2f:30:52:7b:e2:e4:3a:69:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:AE:D5:F9:F3:C5:CA:EE:9F:0F:06:23:85:F6:63:A7:E4:FC:EB
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:77:45:1d:9e:de:8a:31:55:b0:53:7c:56:37:08:9a:57:
ac:f4:19:33:e3:93:b1:ee:89:b7:c0:e6:fe:3c:01:ea:43:ca:
19:9c:70:af:1b:0c:02:7e:9b:3c:3c:83:3a:cb:cc:c8:24:d9:
d7:d3:ed:45:28:6c:c0:53:72:d5:49:ff:8a:77:f2:51:74:eb:
e7:b6:3e:2b:2d:16:fc:a6:e6:73:a1:44:57:1a:5d:43:32:91:
ae:f2:ca:a1:20:ae:6a:fa:41:89:4e:0a:b4:7e:e6:f6:c5:f8:
d9:c1:12:a1:b5:12:53:06:aa:dc:06:13:99:e2:c8:f3:99:9f:
30:28:7b:54:86:d6:3e:39:63:79:c7:16:7c:89:34:42:3f:98:
47:03:69:73:32:6c:df:99:e6:52:4e:f3:a7:90:88:60:b0:27:
90:e0:87:df:d7:a2:c6:ca:a2:ac:75:83:6c:c4:70:33:a7:5e:
94:85:df:4f:58:fe:20:37:97:73:12:a5:58:a1:be:47:8b:5e:
8b:7c:83:10:d2:70:e4:31:82:c1:aa:bd:1a:a3:6d:a0:bd:4b:
90:ef:0c:db:4c:d6:3f:2e:22:9f:23:09:93:c7:9f:db:44:98:
94:7a:6e:4b:2c:04:31:d0:1e:84:e2:32:8f:70:cd:56:b5:7e:
fc:b9:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:55 2025 by rpki-client