Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier: 5VdJk5g8D5rjp8J7IlwBrERQMKl2jjo90Df2pwcrP0M=
Subject key identifier: 19:28:3D:9A:62:28:05:06:E3:3C:E5:10:21:D6:E6:FE:BF:ED:AE:8F
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial: 0198578ED055315EAC9AFC9D6EB26FD533DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number: 0EF1
Signing time: Tue 29 Jul 2025 19:00:33 +0000
Manifest this update: Tue 29 Jul 2025 19:00:33 +0000
Manifest next update: Wed 30 Jul 2025 19:00:33 +0000
Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: ioT9NglUToep7UfY/zukm4ws7gs87x03PXXDiANPlDE=)
2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8e:d0:55:31:5e:ac:9a:fc:9d:6e:b2:6f:d5:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Validity
Not Before: Jul 29 19:00:33 2025 GMT
Not After : Jul 30 19:00:33 2025 GMT
Subject: CN=19283d9a62280506e33ce51021d6e6febfedae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:e0:cf:a2:f2:ca:1f:56:9b:ed:bf:05:81:
02:74:ed:23:9b:3a:05:43:92:d4:d6:6f:f8:f4:94:
f7:a6:de:f9:08:99:47:f2:6b:a1:5a:69:d6:6b:f0:
28:e4:85:79:b4:df:29:72:fa:19:93:be:a3:34:7d:
49:b3:20:b7:49:a8:cf:e6:b6:72:14:53:ce:38:3f:
a0:5e:54:a4:65:50:02:6b:cc:27:81:74:3b:46:23:
ab:f7:8d:15:c9:72:a1:2c:13:ec:ff:bc:8e:fc:73:
b2:7e:a3:be:6f:1f:2f:10:de:f4:e5:24:21:4d:55:
b4:2f:16:9b:67:51:0e:94:6a:66:e5:bb:f9:42:1d:
11:82:66:91:07:ab:82:a2:ce:07:94:18:0c:8d:0d:
08:5b:01:e3:ef:dc:75:b8:23:b1:2a:97:f3:03:93:
03:31:a2:ca:78:b0:aa:a3:ce:c3:9a:18:a1:7e:c1:
6b:fb:bc:da:22:59:ec:56:07:2c:9d:da:c4:9c:7b:
c5:d8:0f:31:47:1e:09:35:ed:1e:2e:da:24:de:17:
39:09:83:f8:aa:d6:47:63:dd:a8:dd:10:20:cd:46:
32:ce:36:1d:2f:2a:fe:e6:3a:0d:eb:6b:2c:cf:28:
74:2c:31:56:9f:61:f9:97:96:73:73:c9:d6:da:5c:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:3D:9A:62:28:05:06:E3:3C:E5:10:21:D6:E6:FE:BF:ED:AE:8F
X509v3 Authority Key Identifier:
keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8e:73:af:4b:90:7c:c8:73:a4:5a:8d:52:91:94:d4:b3:82:
16:f5:cc:0f:cb:65:17:25:1c:af:11:45:4f:b7:49:25:82:79:
60:d9:e0:07:f6:3d:22:58:62:f9:73:7a:a5:20:3c:b4:81:8e:
d1:fa:e6:d1:d6:f5:54:35:cb:16:57:99:55:a5:0d:f3:ca:4b:
ff:c0:08:4f:bf:dd:94:27:94:94:d3:20:ef:18:c4:7e:c1:30:
44:49:c6:fb:64:52:a1:dc:70:31:50:0a:d2:57:74:22:96:0b:
39:95:03:9f:80:ba:b7:9b:50:08:f7:5a:bb:f7:26:bd:e1:5d:
f7:4b:18:26:ec:ee:18:1f:4d:0b:64:c7:4f:da:aa:f2:0b:13:
bd:ef:50:36:8b:27:cf:0c:a4:31:c9:70:f7:e0:7d:e2:23:ce:
5a:9d:56:8d:82:58:13:2f:04:9e:c7:f6:d2:35:e4:4a:ab:9d:
3c:44:cd:d9:06:f1:0f:56:f4:b0:09:8e:b5:99:90:cf:5e:93:
02:fd:ab:c3:19:02:7f:aa:af:e4:d7:3a:fe:31:0c:81:49:73:
19:4b:20:ca:d1:d7:c2:0c:cd:3a:e5:6b:b2:82:4a:65:01:6d:
a7:37:1c:82:43:df:44:05:3e:c6:df:e7:a8:38:f9:dd:87:a3:
39:a5:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:42:00 2025 by rpki-client