Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: wmh2t6medTdtJxNcAGG3GOn0pekgkimH//vNdyXQScw=
Subject key identifier: 48:5C:19:B1:6C:55:2C:85:38:9A:D8:03:F1:BF:26:E6:52:E4:CE:2A
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 0198548DDB8E0FFC7E0E756B2BB96A77844B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 1149
Signing time: Tue 29 Jul 2025 05:00:39 +0000
Manifest this update: Tue 29 Jul 2025 05:00:39 +0000
Manifest next update: Wed 30 Jul 2025 05:00:39 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: +oz96nvI7j93x3MFRZWzxL44UlLzb7pYUKvZvXdXxqU=)
2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:db:8e:0f:fc:7e:0e:75:6b:2b:b9:6a:77:84:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jul 29 05:00:39 2025 GMT
Not After : Jul 30 05:00:39 2025 GMT
Subject: CN=485c19b16c552c85389ad803f1bf26e652e4ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:17:58:2a:d4:44:9b:dc:68:4a:9d:3f:b8:
fb:a5:09:ce:a7:d2:c2:56:b0:fe:10:47:a3:c9:a2:
f0:37:32:85:78:80:4c:21:ce:68:79:b5:28:0a:b8:
2e:6a:d9:0b:f3:c5:f1:13:ab:4c:d1:a1:6c:3e:e8:
17:9b:23:57:8c:be:8a:25:46:a6:aa:1c:77:5b:bf:
08:93:29:34:e8:15:5e:2d:52:1a:8c:6a:95:50:d6:
9f:ff:80:12:72:89:53:86:1c:6c:0a:b8:e1:50:97:
02:79:26:bb:96:60:9d:12:8f:41:d5:bb:1d:e2:68:
0a:84:78:48:99:98:93:3c:c6:ec:20:7c:80:db:75:
59:1e:36:82:13:1e:57:4c:d4:0a:14:4a:ef:3d:67:
03:c8:db:2d:a5:ed:cf:6c:f2:16:a7:7f:fe:d3:20:
9f:cf:a4:38:c1:eb:6a:73:b8:7b:d7:5d:b7:d5:f0:
73:1c:74:dd:a8:b3:25:e7:8f:5d:5c:3a:a1:ca:f6:
05:5a:1c:2d:12:d4:38:0a:4c:48:88:2c:cb:01:ad:
82:16:c9:f7:29:0d:da:9b:6d:39:dd:27:8f:f2:69:
39:a3:4f:cb:bf:6d:56:ce:f2:c9:81:1b:15:3f:3b:
92:bd:68:42:c4:21:40:da:95:8a:14:02:d4:01:6b:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:19:B1:6C:55:2C:85:38:9A:D8:03:F1:BF:26:E6:52:E4:CE:2A
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:d1:38:96:67:ef:b6:5d:c3:98:da:09:da:a3:93:fc:83:
47:85:3d:18:4d:ba:41:8d:21:7e:cf:49:35:b7:a1:8c:c5:f5:
fa:f7:17:55:8f:5d:aa:b4:c5:73:7e:db:08:dc:73:9b:fc:f4:
b5:f6:6c:a5:05:d9:fd:82:98:31:cb:9b:d0:2b:9b:d3:3c:50:
d2:65:91:28:08:c8:f4:90:87:32:c0:7e:f8:21:e8:39:aa:8d:
7f:af:fe:16:85:6f:a0:4c:99:e6:35:bf:2d:8e:7d:e5:5b:95:
95:ae:92:dc:be:fb:af:f1:b3:15:9e:46:21:7a:80:b1:4a:90:
34:45:b4:1c:14:30:ed:0f:39:de:03:73:8b:3f:8f:8e:68:01:
c8:12:31:2a:38:81:cc:b6:c8:5d:8c:d3:4e:21:73:27:26:b7:
0f:6b:09:2a:9c:b9:10:8e:cd:a5:33:5a:e0:b1:4f:d0:84:d3:
5d:0e:1d:38:75:ad:f1:c8:8b:55:74:eb:44:77:91:a8:66:39:
5a:c8:e3:5c:59:9c:f9:0d:2c:90:bc:dc:18:8b:82:37:e8:78:
99:12:5c:5c:46:55:9a:7e:b5:58:16:6e:7d:27:06:58:f0:85:
df:07:de:26:44:c5:82:d9:88:b5:08:97:71:ff:c7:b8:d2:e3:
75:ca:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:49:39 2025 by rpki-client