Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: 1/BTxUZRRlFxwcF4E91v2HcdJWBI1A2qXsdb6w1SVQE=
Subject key identifier: 67:23:2D:67:0B:AD:AD:E7:13:9E:7A:E2:43:71:A1:90:52:64:CC:89
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 0198530EEECCF5CB9CEDB630ABBA65A279FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 22:02:24 +0000
Manifest this update: Mon 28 Jul 2025 22:02:24 +0000
Manifest next update: Tue 29 Jul 2025 22:02:24 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: cViUYI1szHCk77GSo3CHbBW+XR/Qil+av0IWm401snk=)
2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:ee:cc:f5:cb:9c:ed:b6:30:ab:ba:65:a2:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Jul 28 22:02:24 2025 GMT
Not After : Jul 29 22:02:24 2025 GMT
Subject: CN=67232d670badade7139e7ae24371a1905264cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:75:93:9e:50:e6:cb:6d:a1:b3:d7:c7:99:
74:bf:a5:9f:0e:bc:a2:4a:c4:4a:c7:70:0a:44:1b:
f5:27:42:c0:0b:3c:42:e8:a1:83:24:5a:65:ea:43:
31:1e:37:27:92:c3:52:7d:f1:9c:1f:c7:78:f1:bf:
ef:62:21:f9:9c:2c:21:8d:26:1d:7e:c9:0c:55:ca:
04:21:ee:93:6c:05:9b:71:dc:c2:83:9f:e0:a7:d3:
1f:8a:e9:f0:52:03:a2:be:47:6c:d0:11:ef:7b:10:
42:bb:2f:4e:23:5c:5b:6c:02:da:2c:7a:2f:ec:ff:
8e:a5:99:aa:18:38:8e:31:9a:d4:17:bd:d3:81:26:
65:bd:d7:eb:4f:01:f7:88:9f:7b:b0:89:c5:f2:d9:
bd:25:5e:e1:a6:36:b5:50:72:58:7c:d1:15:f2:7d:
d3:d9:f8:c2:ee:8f:eb:24:f0:52:b6:e4:af:3c:c3:
ce:1d:3a:6d:16:6c:a2:a7:5b:d5:39:26:9a:c0:58:
dd:87:59:5e:2f:19:29:c5:36:7b:c0:c4:0f:9c:24:
7c:98:f4:73:2a:dc:3b:01:a5:d5:ca:29:cb:f9:e4:
01:2c:e4:f7:ac:13:9e:70:be:8f:5e:8e:72:1f:34:
38:ee:f3:fc:a7:15:7a:99:d7:21:1b:c3:01:a5:34:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:2D:67:0B:AD:AD:E7:13:9E:7A:E2:43:71:A1:90:52:64:CC:89
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4a:3d:9a:4c:93:3f:84:ba:88:eb:96:5a:ee:c8:2b:26:cc:
36:9a:94:59:29:0a:6f:fc:68:17:51:9a:49:3e:4c:92:41:63:
3a:f3:ad:fe:65:30:57:36:cc:b6:4b:99:79:4e:ad:49:bc:f0:
58:f7:59:b9:a5:ed:62:1e:b2:24:6e:0e:4f:84:92:4c:8d:b2:
2d:76:47:21:92:6e:a0:d2:e3:e3:ac:93:69:b5:87:4e:a1:80:
92:b2:90:eb:df:c3:0e:cb:f8:6e:5c:87:31:3a:35:99:ce:75:
b6:ed:83:0d:69:75:9c:c6:a3:ed:8e:00:da:21:0f:45:0f:49:
0c:3b:7c:d5:e0:a5:6e:0d:d4:fd:04:5b:8e:c3:57:43:93:ed:
36:c6:16:f8:e8:ee:cf:72:9e:03:ee:44:df:91:34:7f:e0:bb:
32:80:79:9a:d7:b6:8d:56:c0:eb:0d:f2:87:07:d8:d4:65:9b:
81:fe:ca:52:af:bc:89:4e:fc:0d:93:ad:93:fb:d5:aa:39:a5:
57:5e:d0:32:7b:50:2e:e0:15:33:2e:14:1c:59:2e:89:ff:ca:
d2:c4:a1:be:1a:ee:9e:31:19:2d:25:51:c7:37:c1:79:b5:5f:
be:7b:90:10:f6:cd:06:7a:c5:7b:2e:47:bb:f0:6c:72:44:d4:
16:de:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:18:34 2025 by rpki-client