Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: 4CDd2EzKn5skWYR/p10+Eh/1Uuqv6D2IA8nMEEX1O6o=
Subject key identifier: B2:3E:7F:57:CC:C4:CE:60:D0:91:56:BE:EA:E2:D6:F7:27:F9:70:91
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 019848531CB2EEB87C03041BED8A81625148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0CD7
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: JeMopkR59dzHy1ioXmlE1ZIEI9tkQB0C8vHkqDwRU9w=)
2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1c:b2:ee:b8:7c:03:04:1b:ed:8a:81:62:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=b23e7f57ccc4ce60d09156beeae2d6f727f97091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:6f:99:ac:34:58:cd:dd:2a:ac:61:f4:cb:
0e:26:9f:ae:7f:31:85:5a:05:6c:46:75:96:14:95:
fb:90:48:ee:b8:ba:3f:09:20:95:97:f9:9d:4d:7b:
31:c3:0b:70:4e:f2:31:ee:f1:22:fc:ad:7e:78:ab:
69:97:f6:71:51:81:b5:e3:24:78:01:fc:b1:ab:f0:
a7:38:82:e5:c7:20:8e:22:b8:09:ca:f7:77:df:f2:
7a:39:4a:6c:6a:71:da:94:ee:ab:49:1e:fd:4a:f8:
44:74:22:73:85:93:76:d8:f2:b4:c7:02:46:2c:0c:
1a:b5:e9:f8:32:d2:53:f2:db:63:29:94:43:d8:0c:
25:8c:e6:db:2b:94:b7:4d:8e:f5:06:0e:da:56:59:
07:c9:1d:b7:df:9f:e5:3c:be:6d:63:12:ff:64:cd:
b0:29:ed:88:5a:1c:1d:08:eb:a4:a6:0d:41:e0:88:
b5:fe:ed:6e:e5:c2:ef:06:90:15:a6:e8:69:72:75:
06:e3:fe:9b:7f:2f:db:0c:0c:e4:ac:87:5e:6d:c5:
6b:98:7a:51:06:48:44:f6:c5:d9:f7:d4:2c:25:ee:
01:3c:0a:e8:90:9d:58:11:34:4d:ea:fc:92:09:61:
0c:ed:2c:a0:4c:3e:95:1d:6f:6d:5a:34:b8:cb:7e:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:7F:57:CC:C4:CE:60:D0:91:56:BE:EA:E2:D6:F7:27:F9:70:91
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:44:33:33:40:71:20:6f:95:25:ec:66:f0:a7:e1:3d:cd:
cd:d3:ba:41:16:0b:77:97:a6:7b:8c:93:09:a5:49:66:d3:cc:
26:78:f6:04:8f:5a:9d:86:c7:cf:d2:6d:e0:e3:7e:3f:a0:2d:
a4:92:9d:b3:9b:48:0c:78:f0:76:b2:cd:e2:f8:72:c0:fe:4b:
1a:a9:b5:58:8d:78:d8:d3:0f:fb:0e:1d:9e:6d:48:32:f8:01:
94:f9:14:4b:9f:15:42:0c:96:27:2e:53:20:97:64:7a:61:fe:
5a:ee:57:1c:d1:bf:dc:c0:18:e9:f3:86:a2:60:e7:be:5b:5e:
f6:07:d8:0f:4e:4a:b1:1d:f6:37:3a:47:bb:23:3b:2a:8e:06:
15:c2:5d:01:1f:cb:06:37:bf:4a:3a:9f:a7:9e:52:a5:57:3e:
76:e3:96:80:97:f4:1b:88:4d:dc:7f:cf:dd:34:e9:e7:e1:6e:
47:27:53:87:82:48:42:d2:3b:2f:71:5f:bb:33:7f:f3:c2:79:
69:05:f1:4d:1d:6e:8d:2a:c8:c6:c9:c4:42:d5:cd:04:ef:a4:
ea:04:7a:e8:67:71:e0:7f:d0:8e:e8:c8:8e:c7:be:5e:a0:f0:
65:09:48:10:01:e4:4a:51:e6:5e:68:40:e5:b3:b1:dc:7f:63:
42:f9:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:04 2025 by rpki-client