Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: nIfba/TX5Cs/Bufei7VRG2YPntlrtZoB3ZM8KfcPaPM=
Subject key identifier: 5A:AA:5D:00:52:EF:4E:96:B4:C6:87:EC:F3:0A:97:E9:2E:6C:CF:63
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01983FBDE745F5974418888F43D30591C52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 04:01:06 +0000
Manifest this update: Fri 25 Jul 2025 04:01:06 +0000
Manifest next update: Sat 26 Jul 2025 04:01:06 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: lWgLcKT2TUt0asN1DJsW0sscYqqeOv9Fop0tZDVXFso=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:e7:45:f5:97:44:18:88:8f:43:d3:05:91:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jul 25 04:01:06 2025 GMT
Not After : Jul 26 04:01:06 2025 GMT
Subject: CN=5aaa5d0052ef4e96b4c687ecf30a97e92e6ccf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:06:cd:77:6e:36:88:ba:2d:3e:16:94:b6:
d9:a6:02:2a:f3:06:b3:b1:38:58:76:c8:81:03:31:
a9:9f:b2:55:0f:8e:24:2b:9b:90:96:3a:1e:8a:2d:
cb:91:5c:ba:9b:67:93:b6:ff:47:f1:53:8d:6b:cc:
16:87:40:03:c4:6d:60:b5:25:d6:f8:8b:3b:6d:22:
32:13:07:7f:45:07:cf:17:67:7f:5f:53:85:0d:16:
75:0b:98:5b:38:9a:42:51:42:4c:b7:07:37:cd:87:
b5:12:f3:eb:e3:ad:cf:a4:51:07:94:f6:6d:6f:6d:
95:90:68:31:7f:45:3b:bd:e0:3c:91:9e:25:4f:23:
1d:24:b6:b9:cb:be:d3:32:01:be:92:33:06:1c:7c:
8a:83:bb:74:e6:2d:c6:dd:cf:a1:06:90:84:a4:d9:
c0:55:69:ff:b4:8a:89:12:aa:29:66:f2:56:af:18:
c7:5b:26:8a:ef:03:85:e0:0f:fe:1d:d2:5b:ab:4f:
a1:31:13:e2:5b:9f:0d:f6:6a:b2:f3:ae:8d:14:8d:
32:69:c4:32:93:41:9d:92:77:46:cc:de:c5:3d:88:
dc:2f:08:26:af:83:1d:10:8f:95:bf:60:8e:cd:c5:
e3:23:7e:76:34:e7:14:df:0c:b2:fc:2f:9a:f7:5e:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:5D:00:52:EF:4E:96:B4:C6:87:EC:F3:0A:97:E9:2E:6C:CF:63
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3c:b8:ef:6d:9b:2f:1a:3c:f3:80:cd:f8:b9:90:d5:62:cc:
fd:15:09:25:6c:9c:d3:62:5a:61:63:a0:9f:02:c3:5f:e5:4f:
b0:59:96:10:4a:aa:42:44:cb:d8:9c:f7:f1:3e:7d:ab:d2:0b:
7c:27:3b:06:08:3f:a9:27:0a:95:21:ae:e1:d1:58:cd:37:01:
19:bd:e3:5f:ce:26:de:19:d0:9c:be:ce:8d:77:8f:93:db:a3:
f6:19:62:ab:9e:cf:b1:f5:59:e4:66:79:4c:9c:de:8d:01:fd:
51:d2:6d:e1:42:f8:d4:e9:6d:3c:52:c2:40:7d:fc:b0:dd:66:
72:1f:48:7a:06:fc:32:e2:0d:f1:58:23:35:76:43:c3:f9:73:
bd:a8:89:b7:d6:68:77:6f:2e:14:98:fd:7e:fd:30:06:2a:17:
25:97:7c:5a:ef:dc:e4:44:73:9f:91:6a:77:cc:71:0a:2e:03:
1c:fa:6e:1d:11:16:25:7b:e4:e8:0e:d1:cb:b8:69:0f:85:92:
91:e2:b1:c0:92:39:12:c1:b0:be:53:df:07:a5:a7:ae:1f:15:
25:07:f6:8f:6f:2e:e0:c2:7f:d4:18:5c:08:e4:22:e8:ef:38:
82:2b:d4:a2:13:9c:e8:f5:24:44:1e:6a:c2:5e:b2:74:a0:35:
47:b4:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:43 2025 by rpki-client