Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: 6TrDilsufSz+1E2CUcf0G+BXYT/uipeq4qpjNrRsxWQ=
Subject key identifier: 14:6C:76:AB:AA:90:41:2A:20:47:80:9E:68:4E:FF:A5:7B:83:B0:EE
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 0198466446952EC82F436E0A0749C2501444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 12EA
Signing time: Sat 26 Jul 2025 11:00:33 +0000
Manifest this update: Sat 26 Jul 2025 11:00:33 +0000
Manifest next update: Sun 27 Jul 2025 11:00:33 +0000
Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: hZQnf8rFfSnTrXhvWyxVtsgthGwje1vEg9DbTwnFS40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:46:95:2e:c8:2f:43:6e:0a:07:49:c2:50:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Jul 26 11:00:33 2025 GMT
Not After : Jul 27 11:00:33 2025 GMT
Subject: CN=146c76abaa90412a2047809e684effa57b83b0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:3f:3c:81:be:38:38:ba:bf:92:82:55:da:
23:76:a3:ee:66:3f:8b:a7:a5:df:59:bc:06:ce:f2:
b9:06:23:f8:40:4e:7b:55:4d:e7:f9:37:c4:32:da:
be:a9:2d:dd:42:ed:fa:dd:4d:bb:3b:46:c7:0c:66:
93:e1:35:ca:19:86:d4:40:d0:e6:02:7b:8d:0f:98:
d6:25:c2:54:c9:cf:9d:12:06:0d:4e:f1:2f:ec:e7:
37:9a:b0:1a:eb:ab:33:16:b0:c9:8e:8b:43:33:26:
a6:7d:5c:9b:30:d1:0b:fc:bf:8d:71:0f:a9:bf:d7:
8a:7a:54:30:a7:60:85:04:ca:09:4d:61:5b:45:f7:
18:1a:85:b0:c1:2a:c4:52:c3:d4:6f:3b:5d:a2:6f:
b1:86:c1:22:db:a7:b5:52:8f:47:ba:09:34:ef:62:
1b:7f:d0:56:4b:f6:4b:b9:95:62:c8:68:94:ed:4e:
62:93:a6:fc:96:88:f9:8d:0f:84:b1:7f:b2:f1:50:
56:a6:54:07:67:5e:22:a0:a0:fe:e9:da:f7:e2:0e:
26:97:83:a8:42:a2:a1:57:8a:95:75:c6:11:c4:cc:
2e:d6:e4:3b:aa:c3:7e:d4:7e:57:c5:36:9b:4d:1f:
b6:72:29:a1:d6:06:0e:11:11:b1:f0:f6:b4:61:44:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6C:76:AB:AA:90:41:2A:20:47:80:9E:68:4E:FF:A5:7B:83:B0:EE
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2d:73:fe:d7:dc:b4:55:91:fb:15:a4:9b:6b:7c:31:06:36:
39:de:08:72:a7:9a:ea:ef:45:49:73:85:fd:b1:b8:ca:c4:68:
6e:63:96:43:09:73:55:da:de:f4:36:5f:00:34:1c:d6:38:cc:
f4:5d:1d:2d:36:e6:06:5f:25:61:a9:b8:40:27:00:92:11:27:
e3:50:b5:f6:73:d5:1e:22:06:d4:88:e1:1a:ad:ac:ca:d1:87:
ad:3f:43:c9:21:04:01:e6:ff:3e:ef:87:0f:67:a6:2c:25:7d:
45:cf:1f:28:c1:4d:eb:20:ae:67:15:e6:35:7e:41:89:77:bb:
d7:eb:e0:fb:06:71:97:50:01:f9:1e:da:64:9e:91:75:3a:3b:
df:67:37:3c:6a:d8:4d:68:bd:9c:d2:3a:43:b0:25:ae:bc:a8:
da:18:45:36:b4:46:99:fc:08:b6:23:93:43:20:d5:20:55:3a:
e9:ae:ff:a7:11:7a:2c:1b:d7:ee:45:d2:23:0c:57:c1:0a:c5:
22:eb:4c:d7:96:70:a6:bc:8c:27:52:cc:53:e2:11:7d:da:d1:
28:eb:23:ae:91:48:30:81:0e:ca:57:6f:2f:47:65:ff:e6:88:
c8:61:22:6c:a9:46:83:5b:1f:d4:e5:8d:50:e8:92:99:da:7b:
94:e0:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:51:58 2025 by rpki-client