Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: U4Q31H5HJ/7qP6kx9XmGsgZSD+8byPJxDFUnlxLRXKA=
Subject key identifier: A0:FD:04:49:11:8B:09:8A:96:A0:05:36:ED:3D:AC:0A:11:DC:8C:E4
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 019849650778F884FB31FD2531087EBD5394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 03E5
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: ZXZIZFfKN4ebZ1bKh97FZ4l3/fsn9fdQW3Ivz47d1nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:07:78:f8:84:fb:31:fd:25:31:08:7e:bd:53:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=a0fd0449118b098a96a00536ed3dac0a11dc8ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:e1:d5:e6:e4:3f:04:5e:87:9c:fd:81:d5:
01:19:73:fc:65:a2:75:c5:7e:b8:d6:9d:31:1e:3e:
f0:0c:e4:e3:ea:6e:44:5f:6c:06:b4:12:eb:32:48:
8c:10:3f:ae:1e:a4:fa:2e:78:34:2e:9b:59:9f:66:
c4:60:4e:67:ab:6b:a9:aa:ae:84:8f:ee:ff:0c:ce:
08:4b:51:7c:ad:ff:1a:ab:3a:25:db:4c:e1:36:61:
3f:55:91:3f:d2:80:1b:ba:7d:82:b9:f6:71:f8:97:
8f:ac:af:e5:87:4b:58:0c:fe:bd:7d:64:07:12:e9:
e9:4b:c0:43:4f:11:82:ed:37:fc:7d:fa:07:ff:86:
3b:e1:28:2d:fe:e4:2d:3b:d8:4e:c6:cb:1e:9d:aa:
e8:0b:2f:55:6e:ea:d1:49:07:bf:50:71:37:00:82:
7b:c5:a3:a6:e6:cf:15:9f:a0:e5:c3:1e:08:65:dd:
b0:19:24:81:fd:d2:cd:21:41:14:94:e0:f8:99:6d:
73:0d:4d:d3:e6:3c:4d:41:9b:4a:63:c9:d3:6a:10:
4f:7c:cf:ef:3a:a0:88:41:3f:2b:16:51:ff:fe:02:
c0:bd:0c:e5:3d:5a:29:7d:53:03:40:79:77:ec:35:
e7:6d:ba:9c:6c:90:70:31:30:54:0c:cb:67:5a:f6:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:04:49:11:8B:09:8A:96:A0:05:36:ED:3D:AC:0A:11:DC:8C:E4
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:29:1e:46:c7:78:ff:67:fb:af:9c:e4:62:d5:be:ff:43:
d1:ec:27:5b:b0:71:31:18:c5:fd:cb:7b:a4:dd:05:0a:cb:6b:
11:cf:fc:df:ee:9b:bb:f9:33:e2:07:fd:3f:1e:ce:a4:7a:4d:
e4:44:7f:85:5f:08:3c:de:45:55:63:fc:9a:78:f6:2f:d4:ab:
a2:61:fe:35:f4:ce:1a:78:c9:8f:08:55:2b:47:9d:0d:8c:dd:
77:78:25:22:49:13:e5:98:f9:77:61:26:46:db:ca:2b:2c:9d:
ce:a1:fb:d0:bc:24:49:62:af:42:d3:6f:c8:d1:13:83:65:e4:
db:db:42:72:68:87:86:85:fe:d2:6d:c0:3a:6f:0b:bc:a2:d2:
1f:fa:34:ff:5b:0b:79:e3:37:78:1e:80:ef:f1:1b:69:f5:21:
fa:cd:7f:fc:b9:8e:1f:40:d7:f3:d2:0f:dd:2c:67:b1:c1:1b:
e1:ff:53:e5:6b:91:4d:a6:06:9f:78:27:f3:6e:60:f5:50:8e:
ce:48:aa:71:35:ac:d3:f5:5d:d0:b2:c8:85:cb:70:95:93:29:
9d:bd:96:bd:95:30:d3:8a:01:08:a0:31:95:13:d9:0e:ab:39:
39:63:e2:8d:d6:33:7c:8c:6d:8a:23:f6:c5:1a:8a:38:ab:de:
fa:86:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:33 2025 by rpki-client