Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: qtE8do1jI0kTPLrUmyVmmcU8wF+lJc/vrcLSathWXlg=
Subject key identifier: BA:17:1A:C4:37:38:31:A6:DE:59:E3:0C:6A:6E:53:3A:6D:19:16:E7
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 019848F77C835DC24CC019B9005F8A96C8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: 80NAA0Ph0+B1Psv/X4qSgwoHS7dALLm4rGv8ygH/dbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7c:83:5d:c2:4c:c0:19:b9:00:5f:8a:96:c8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=ba171ac4373831a6de59e30c6a6e533a6d1916e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:39:24:53:ba:fa:31:ab:0e:2d:d2:3c:4f:
d1:c1:b3:04:6a:9c:1e:32:fa:03:b7:fc:e8:6b:a6:
5a:19:0c:1f:9f:f7:5f:11:64:eb:12:6a:fa:7e:5b:
7f:d0:e2:b3:5c:81:49:1c:68:e0:65:f7:14:42:ce:
c6:74:4d:fe:84:65:29:a4:f6:03:6e:49:40:c8:9f:
82:52:3e:ed:1a:71:08:08:5a:1e:55:c2:1f:f4:bd:
36:ae:12:19:0d:55:bc:c2:9e:ef:b4:44:08:63:1f:
40:c6:c8:d6:89:9b:73:16:58:22:20:73:61:a3:52:
28:84:df:97:c6:bc:da:ee:47:21:0d:b2:1c:9c:ec:
cb:7a:4b:0c:41:bb:c4:5f:03:88:6d:bf:f1:4c:c9:
2a:90:a1:b3:75:59:c6:8a:de:c5:10:28:6b:b7:bd:
1d:57:a4:c1:48:23:1f:ae:6e:b0:5f:de:92:0d:89:
a8:50:5c:60:7f:c1:c6:6d:7b:03:6f:56:c2:94:52:
eb:29:a5:40:07:c9:5c:29:65:9e:bb:1a:cc:7e:2d:
7e:d5:18:cd:cc:dc:45:6b:a8:85:d8:91:8d:83:ca:
c5:d5:c7:06:16:90:3c:0a:5a:a1:59:21:fe:85:5c:
b9:97:3c:05:65:ab:fc:2d:c3:a8:ce:78:ba:77:ef:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:1A:C4:37:38:31:A6:DE:59:E3:0C:6A:6E:53:3A:6D:19:16:E7
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fd:19:81:79:14:e5:5f:0d:6d:5f:69:d4:42:3a:a1:4f:9b:
59:76:97:35:56:95:1f:3a:01:d4:b8:b3:57:c4:80:34:80:81:
6e:32:bc:4b:92:b1:17:dc:b8:c6:f0:60:c2:4a:c1:a6:40:7c:
3d:e3:ac:c3:ad:da:9f:d9:b2:23:0a:7d:47:25:83:c5:c8:0c:
98:45:87:1a:5d:e9:46:1b:83:d4:d6:2c:29:14:d1:29:f3:d8:
90:20:21:1d:40:08:19:4c:a9:1c:d9:91:7e:dd:23:62:cb:3d:
53:cd:fe:8a:ae:0a:c1:45:45:29:2e:01:5b:9d:86:ba:6a:03:
84:40:6d:9e:f2:c5:39:e3:c4:b5:83:6d:43:f5:5a:76:58:cd:
96:78:cd:28:8d:12:92:88:c4:7f:e9:ce:63:7a:a3:34:29:b4:
c0:a8:d5:17:be:7b:7a:73:c3:dd:50:fe:ec:d8:98:94:b4:c9:
41:a6:e0:f8:fa:51:8c:a1:1e:6a:0f:9e:c8:d9:95:05:67:f7:
fa:d1:2f:0b:7d:54:ad:4d:1a:62:24:0b:0d:c8:7e:d4:7b:77:
bd:76:b9:82:6a:54:17:52:62:ea:7d:ca:d0:30:8b:41:bd:01:
97:04:85:ba:63:af:48:fd:5e:2e:89:ea:d5:5e:73:bc:e0:2a:
09:de:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:34:35 2025 by rpki-client