Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: 5d5KkExEn/a0WvkGrEm9CMKoisykdKv7PC8MdO2j7is=
Subject key identifier: E5:5F:48:75:AB:79:3D:E4:DD:03:90:BF:77:63:21:86:D7:4E:44:4C
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 01984A411174FC2BC3FB8B43C80D77E385D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:34 +0000
Manifest this update: Sun 27 Jul 2025 05:00:34 +0000
Manifest next update: Mon 28 Jul 2025 05:00:34 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: HTEJU/zKHPSfRCDsS+kEKsodppE2pJuzySJ90zBOH5M=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:11:74:fc:2b:c3:fb:8b:43:c8:0d:77:e3:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jul 27 05:00:34 2025 GMT
Not After : Jul 28 05:00:34 2025 GMT
Subject: CN=e55f4875ab793de4dd0390bf77632186d74e444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:85:af:f1:a2:3f:01:6c:89:29:b5:d0:14:
b8:f1:01:3e:96:b8:b9:bf:c5:cf:0a:32:eb:8a:66:
1c:02:79:eb:cf:91:bd:d7:3a:87:cb:ee:60:00:90:
3e:7b:1d:78:46:8e:3b:b6:79:99:b4:a4:87:50:44:
3c:72:0e:bd:62:80:7c:c8:bc:81:11:75:c1:79:c5:
b5:17:3a:d3:d7:dc:84:fa:4c:24:a5:37:2a:51:84:
9c:97:54:60:1f:5e:c9:71:07:63:14:c7:22:0b:ee:
79:df:a9:ff:ff:bf:e9:a5:67:50:88:cf:99:50:f5:
99:2b:ac:12:7b:eb:ce:5b:32:10:fc:54:64:36:18:
8a:62:27:b5:70:2e:f7:bc:ae:1a:c4:24:e5:4a:00:
0f:6b:2a:bf:55:0b:5a:60:c8:da:55:e7:92:68:6c:
da:f1:49:af:f5:34:04:59:27:0f:6e:17:8b:da:8e:
f2:13:e2:55:63:f6:ed:a7:32:af:a8:5a:71:91:22:
5e:0d:ba:da:29:58:2f:40:80:88:f2:5b:cd:f9:de:
29:b3:9a:96:3a:fc:c2:8b:08:f8:66:bd:54:4f:a2:
26:b9:4b:63:11:9a:74:67:92:36:d3:f7:af:ae:b1:
0c:63:2a:b7:27:00:49:aa:73:20:cc:ff:00:dc:61:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:48:75:AB:79:3D:E4:DD:03:90:BF:77:63:21:86:D7:4E:44:4C
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:2b:f5:b6:f5:ed:7a:51:03:55:4a:28:0a:3a:2e:df:f8:
8b:cd:1b:31:5f:9b:e4:65:62:c6:f4:ef:04:6d:41:a8:f9:fb:
7d:51:54:42:4d:f0:5d:9c:8e:7b:4f:11:bf:11:43:af:b9:1c:
69:e0:b4:6c:e0:a3:26:e6:11:b5:76:9a:d4:bb:f4:1b:81:fd:
25:ba:37:a0:d7:76:ca:23:95:c9:11:7d:a7:00:b4:33:a1:81:
39:de:a4:b4:47:32:ae:58:19:02:92:23:90:29:f4:83:0e:24:
5d:f2:3a:73:17:c5:57:4c:a9:06:8e:6a:3c:3e:a0:d2:05:59:
40:90:d0:fc:fe:dc:42:1e:36:e6:d8:3b:f1:18:6b:76:8c:ce:
f0:ba:b3:82:47:a8:c2:b4:ef:53:69:10:cf:d7:46:8a:19:f6:
52:56:e4:ab:42:ec:83:af:a1:0b:6c:b2:14:24:e6:53:61:16:
68:63:0d:b2:84:e5:76:c7:de:bc:bc:5f:5e:f5:74:79:64:57:
7f:4a:11:4d:e7:d0:ca:5f:2c:c8:1b:6c:6d:e1:36:91:49:c0:
13:01:53:84:81:22:e7:ae:51:b6:5d:ae:c4:31:5e:d2:26:2d:
75:20:7e:16:61:75:c5:8b:4b:8d:83:3f:39:64:43:e5:db:fa:
d2:b1:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:40:35 2025 by rpki-client