Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: zp+27pf0EzNlantNDDjmPENBwF5GS8AX21ZwA/h1oIg=
Subject key identifier: 56:EB:C7:24:6C:38:98:9A:5A:C7:C0:48:50:D4:AA:C5:50:8C:86:2E
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 01984A4169AC7F349C66C1CFFA30ED267251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1393
Signing time: Sun 27 Jul 2025 05:00:57 +0000
Manifest this update: Sun 27 Jul 2025 05:00:57 +0000
Manifest next update: Mon 28 Jul 2025 05:00:57 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: MF+AEsFo3pxMQcbtf9Ixpz3sUaH+sgj0bDS6S4XSU5g=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:69:ac:7f:34:9c:66:c1:cf:fa:30:ed:26:72:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jul 27 05:00:57 2025 GMT
Not After : Jul 28 05:00:57 2025 GMT
Subject: CN=56ebc7246c38989a5ac7c04850d4aac5508c862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:be:cb:29:ce:50:a0:e7:cb:2e:36:69:44:
02:a5:68:88:13:57:58:c4:22:46:89:dd:40:54:81:
d8:d3:db:7b:e4:d8:1c:1f:40:9e:13:3f:96:a9:78:
af:d8:b3:0e:08:ed:03:27:cf:91:46:66:87:c0:a1:
9d:5a:be:90:85:d5:50:62:bf:c0:89:af:0b:e6:7f:
13:d3:6b:9d:51:4d:6a:64:5d:85:64:89:1e:36:82:
4a:f0:f6:a6:9c:c6:53:97:33:c9:bf:6a:b5:15:44:
aa:e9:47:9e:ce:03:c3:9c:49:64:2d:85:b1:59:d8:
0e:2d:0b:7e:8f:85:a1:57:12:3e:d3:d8:9f:2c:36:
53:cb:5f:d1:b1:b3:f3:41:4a:da:da:64:59:16:8f:
f1:4f:78:ed:a0:f8:6b:69:e2:ba:61:02:8e:07:b5:
0d:72:e6:ec:1b:a5:43:fe:62:26:b1:7c:59:12:4e:
99:dd:e8:1d:93:a7:93:98:fb:5a:05:04:13:a2:f5:
a7:5e:0c:16:f9:bd:d7:90:a9:65:ff:3f:08:a8:b9:
85:18:35:5a:03:7d:79:e6:61:b1:2e:56:2c:be:a8:
72:f9:9b:56:89:3e:09:86:b0:8f:0c:b8:f5:34:27:
c5:7c:01:19:8c:87:1d:5a:9b:a7:50:4c:72:3c:39:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:C7:24:6C:38:98:9A:5A:C7:C0:48:50:D4:AA:C5:50:8C:86:2E
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:da:dc:cf:d0:43:cc:43:2b:b5:ac:03:c2:93:f2:ba:10:
bd:bd:44:56:6d:ae:6f:80:33:2a:69:46:5e:f8:a6:d6:e3:e4:
c0:66:50:33:df:50:15:63:6b:73:40:95:73:2b:3e:90:29:40:
d3:31:af:6f:1c:a3:c3:f0:e2:06:45:2b:5f:37:69:aa:4a:ef:
47:80:02:17:cd:2f:e6:3c:08:68:c4:41:9e:c2:a5:83:89:6e:
0c:ed:d7:ac:cf:46:76:23:71:0b:69:63:91:30:a0:e9:cc:ef:
02:f9:f4:56:5a:fa:29:ac:6b:3a:4b:5d:06:02:ee:20:c7:aa:
3d:52:da:2f:f6:66:d2:13:ca:a2:bc:40:b4:57:ad:a0:b2:94:
80:82:10:85:8c:4b:61:f5:bf:e7:db:7d:61:37:c0:4c:01:3d:
ee:f9:0b:62:65:bd:4d:9c:9f:58:a5:0e:e2:bd:fb:96:82:24:
86:b0:d8:cd:48:d2:34:6c:f3:fc:0e:ea:bc:3d:4e:d7:a0:7d:
99:69:81:94:c6:2a:2b:7b:70:8f:95:67:dd:5e:0f:a5:f0:c0:
73:ed:43:bf:ef:34:15:ff:38:83:b3:39:c1:bb:8f:e4:0b:68:
6b:f7:7f:81:4a:56:23:28:16:47:08:2e:0c:b4:25:97:82:63:
f6:0f:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:52 2025 by rpki-client