Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: k8abHU3eYTb/iAIJjSA+fiovSXi0+DAYizjyUybtvCg=
Subject key identifier: 29:90:4C:8E:03:D7:71:46:0A:BD:06:04:00:75:73:D1:38:8D:FB:85
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 0198469AF4C59255214A5BBB7933E33AC69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1610
Signing time: Sat 26 Jul 2025 12:00:16 +0000
Manifest this update: Sat 26 Jul 2025 12:00:16 +0000
Manifest next update: Sun 27 Jul 2025 12:00:16 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: QkjxkJNhaFFdRBOx7v6loO9oCrzKIgdgzCPR0jwK3YA=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f4:c5:92:55:21:4a:5b:bb:79:33:e3:3a:c6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jul 26 12:00:16 2025 GMT
Not After : Jul 27 12:00:16 2025 GMT
Subject: CN=29904c8e03d771460abd0604007573d1388dfb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:c1:6d:9d:98:9c:a2:55:f4:74:35:8c:1c:
b5:67:d1:3c:6f:e3:e1:5a:07:68:fd:d2:cd:51:73:
78:43:25:4e:ef:2f:9c:a7:cf:b8:55:69:94:5c:9c:
56:bf:93:22:c6:98:3d:38:9b:39:fa:7c:26:3b:11:
2a:98:2f:ea:c8:7a:a7:0a:7c:ba:a6:b3:cb:ee:42:
fe:a4:c2:95:56:9e:c5:b0:32:91:a9:3a:82:70:a5:
1d:ac:9f:6d:01:a9:21:c0:0b:ba:e9:f6:6f:1c:1b:
ef:0b:1b:0b:cf:38:49:bb:9f:9c:f1:62:10:d2:06:
c8:a7:2d:50:21:37:93:94:d4:f5:68:23:8a:9c:8a:
a1:06:19:25:61:59:13:27:28:bf:4f:60:9f:26:25:
da:03:64:77:f5:ee:72:ed:b5:e2:04:cf:13:6a:94:
93:f0:20:6b:48:38:d4:d0:60:7c:f7:59:70:e7:c8:
49:ba:d7:e3:7f:6e:5f:8a:d9:eb:ad:50:74:73:4f:
37:6e:ed:91:76:83:26:55:8b:8b:4d:27:4c:28:85:
b0:f9:48:3d:10:cd:4f:c9:38:8b:46:3f:12:b3:53:
1b:59:99:ed:1d:0b:dd:23:1e:60:34:40:b8:6a:38:
9e:4e:ee:4f:3f:30:d6:27:86:e3:e2:f7:2e:e0:b0:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:4C:8E:03:D7:71:46:0A:BD:06:04:00:75:73:D1:38:8D:FB:85
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:eb:1e:d1:d5:21:46:d0:9e:58:96:a1:3c:f9:41:ca:cb:
70:4d:f5:f9:09:2d:75:b8:1f:9c:93:15:c1:92:20:ab:4a:79:
74:71:67:91:15:f1:e9:d8:14:91:59:36:e6:d7:7a:99:28:dd:
11:d3:6b:21:35:40:c3:15:61:cd:42:0b:3b:8a:49:f7:65:c8:
58:7b:be:07:1b:23:06:56:f9:a0:57:91:98:ad:0c:ae:b1:58:
ab:2b:e1:ba:9f:56:ad:74:71:7e:41:d5:32:93:62:87:84:0b:
ea:c7:04:cb:db:f3:e1:dc:02:34:68:e4:6f:b4:00:e0:a1:6c:
3b:22:a7:ff:21:e5:43:06:73:5c:65:f2:42:65:d4:c8:37:71:
c1:8a:c6:17:ae:29:b8:87:32:bc:31:d5:6e:a5:39:6c:cc:2f:
53:fb:35:bd:a2:ed:f8:f0:9c:61:45:68:d3:ef:cb:66:e4:e7:
69:a9:06:91:48:72:d3:6a:e6:93:80:4d:2b:fc:b3:c1:09:cd:
1e:90:95:d8:60:b6:ad:91:69:b5:bc:be:8d:41:d6:89:91:cc:
4c:10:65:5c:cc:0c:38:50:62:84:93:ae:aa:88:19:56:32:3f:
b7:33:2c:a8:a6:51:24:da:61:86:30:13:46:ac:9f:c2:1b:85:
91:3a:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:57 2025 by rpki-client