Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: dWl+glIHW9GYksQVjrpVB73R+KcpbNCIZON2yK0yRVk=
Subject key identifier: AD:19:97:01:F0:A0:72:FB:CB:8B:F5:91:1A:B0:F5:0F:CB:5E:5E:0C
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019849D323F447793910C0CCDF2C6C6174F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 0D82
Signing time: Sun 27 Jul 2025 03:00:30 +0000
Manifest this update: Sun 27 Jul 2025 03:00:30 +0000
Manifest next update: Mon 28 Jul 2025 03:00:30 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: dNY15z2MvOYQcjlGC0/egJ8TJSvNb2gE36myJT8u2mw=)
2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:23:f4:47:79:39:10:c0:cc:df:2c:6c:61:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jul 27 03:00:30 2025 GMT
Not After : Jul 28 03:00:30 2025 GMT
Subject: CN=ad199701f0a072fbcb8bf5911ab0f50fcb5e5e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:3d:66:1c:34:a2:cd:00:da:4b:da:36:b8:
4d:87:79:0b:07:bd:ba:8d:b2:f6:40:af:ba:1d:50:
14:ca:5d:37:7f:df:e2:85:ce:9a:9d:53:2e:49:cf:
18:59:4d:c6:02:e4:07:d3:0d:d6:ea:78:f1:7b:d8:
cd:c3:c5:a5:07:d4:e7:af:d1:34:1b:58:40:ec:40:
1d:b1:ac:94:9d:77:fe:82:ca:8d:c5:f6:1d:31:e7:
22:1c:71:fb:6c:ca:31:71:99:eb:10:2e:20:6b:1b:
74:aa:b6:2d:a4:73:99:44:81:ba:08:b4:04:b0:fc:
27:a6:38:5a:0b:b7:57:d8:57:a6:08:dd:cd:d9:6f:
f2:98:51:23:b2:6a:9f:63:7f:89:5e:3f:0a:9e:ce:
96:2b:d7:b0:f8:57:aa:48:e3:50:3a:d9:9f:26:72:
21:b6:6b:b8:3f:fc:f4:f1:e6:a2:1d:1b:ee:dd:6c:
ef:0f:dd:ec:e9:d9:04:66:36:55:ae:ef:56:f5:fb:
53:78:b3:f8:54:ce:d7:b7:9e:eb:90:11:2d:54:c3:
f7:f3:85:f0:31:24:7a:32:13:00:0e:0d:f2:95:ba:
33:7c:9b:dc:8b:19:a4:ca:f5:7a:c1:4e:78:45:59:
8a:c2:f6:26:3b:3d:ed:4b:6e:4c:d4:36:f5:89:34:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:97:01:F0:A0:72:FB:CB:8B:F5:91:1A:B0:F5:0F:CB:5E:5E:0C
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4e:05:e0:53:a9:b1:dd:ab:9c:8d:65:9e:93:5e:36:1c:0f:
be:32:ce:e1:6c:aa:b9:0b:aa:ae:a8:91:53:bc:cf:37:d0:2a:
03:e1:40:f2:dc:59:62:1a:7e:88:1d:9d:70:70:7d:4d:ba:dd:
1b:28:d0:45:e8:f8:f8:d2:42:1a:1f:d2:43:bf:31:ef:3c:7b:
f6:89:2c:46:a9:c6:95:88:56:14:74:36:82:e4:83:bb:aa:ab:
11:fb:c7:51:f9:be:04:92:31:23:89:3e:84:39:c8:63:f7:ed:
b3:39:0b:c1:88:e7:cb:92:ed:a5:23:45:e1:7b:a3:2b:93:30:
b0:92:58:71:d2:ab:8c:4e:62:6a:80:39:a6:e9:9c:4a:c7:ee:
36:12:44:29:e5:eb:0e:f4:0f:37:5a:80:4c:12:3c:db:e1:fe:
66:72:d2:0b:61:7b:3b:09:da:e0:5e:74:55:27:71:7c:e8:6a:
1b:82:38:c1:c0:cc:e2:64:16:ac:aa:2e:53:3d:1f:b3:d1:22:
c3:49:a2:d7:d8:bb:d9:4b:78:46:56:b0:d1:d9:e0:29:26:46:
f2:8c:23:2e:c7:24:cb:6b:15:5f:64:66:84:7d:dc:14:4f:05:
1c:0c:df:44:a1:8a:37:bd:49:a7:c5:22:be:ea:b9:b7:d4:5f:
0b:f3:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:08 2025 by rpki-client