Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: 7MtVLPbCeD4IMWmui1TD6IS1bczraEcouKsCALg0YEE=
Subject key identifier: 43:B6:E5:67:5B:29:5E:D3:DA:A3:22:A6:F0:AA:F5:4D:12:23:80:0C
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 01984AAF32F1DEC1A631D55D37F6FDEA3C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 07:00:52 +0000
Manifest this update: Sun 27 Jul 2025 07:00:52 +0000
Manifest next update: Mon 28 Jul 2025 07:00:52 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: GnOe6YFpnBszNQQ6bD9Z3LU+eifLn+6yur8qwntYPrk=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:32:f1:de:c1:a6:31:d5:5d:37:f6:fd:ea:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Jul 27 07:00:52 2025 GMT
Not After : Jul 28 07:00:52 2025 GMT
Subject: CN=43b6e5675b295ed3daa322a6f0aaf54d1223800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:77:d0:2a:7e:64:e7:67:8f:e0:7f:23:14:
d1:6c:49:25:fe:7a:fa:10:bd:2b:b1:8d:f8:55:14:
d4:30:38:e2:a4:2c:53:f2:7b:03:be:cc:3d:aa:82:
15:61:c5:66:02:0f:31:e5:b5:63:7a:02:a3:14:76:
bd:40:be:93:9f:9e:e1:26:61:3a:96:c6:e8:ef:38:
ec:1b:a9:3b:f4:e5:88:60:f0:63:68:db:1f:29:a4:
40:fa:1e:9f:4d:06:9c:bf:f4:55:21:95:5f:94:4d:
b3:e6:73:e6:80:8b:99:98:22:d9:37:43:12:bd:02:
5a:fb:96:60:1d:43:5e:98:47:61:8b:88:f4:f8:7b:
63:3d:f6:f8:2e:74:23:03:a5:d2:35:b4:5c:15:6a:
8e:11:9d:53:ed:04:e5:58:43:ab:34:c3:74:00:6f:
11:21:4f:19:88:79:3b:ae:73:b8:9b:db:e1:84:d3:
79:3b:05:a6:88:bf:8f:98:75:16:85:84:2a:23:66:
6b:77:71:41:3b:3b:2d:50:aa:72:ef:61:12:17:20:
2e:06:5d:cf:05:06:1d:96:a3:25:55:80:ef:fd:f7:
8f:61:eb:10:2a:24:6a:b2:bc:24:43:ac:a3:a8:45:
d0:cc:62:fb:74:ee:50:49:ef:f3:b4:bd:f1:65:3a:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:E5:67:5B:29:5E:D3:DA:A3:22:A6:F0:AA:F5:4D:12:23:80:0C
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:56:13:04:c6:57:09:04:80:86:44:d0:3d:2d:5a:93:5d:
91:a3:b2:77:ec:e4:03:ce:71:ca:38:fe:44:c9:3c:6a:ae:c7:
65:53:3c:8f:d2:bc:7e:a2:83:4d:9f:da:36:ba:7e:91:be:41:
57:b3:d5:89:8f:37:01:e4:b4:dc:a1:4b:41:a2:1b:43:9b:14:
a2:b7:e4:69:21:fd:27:47:06:cf:ae:53:3e:5f:f4:bb:b8:db:
01:ac:a4:cf:45:de:aa:d5:ba:2d:8e:4e:de:1e:7f:10:a7:88:
1a:27:b0:7c:34:62:cd:c0:e0:9f:50:22:dc:7a:c7:39:46:e3:
2a:0f:c2:89:5d:d5:af:f2:3e:1d:82:09:f8:1e:87:47:6d:b2:
8e:ad:2a:dc:9f:1e:23:12:80:af:3a:85:55:e4:6b:d0:56:d5:
d5:5d:8d:c2:46:91:ce:aa:af:b9:a4:c9:62:66:17:79:de:77:
81:d1:54:95:1a:1b:57:b1:6d:2a:04:36:0f:79:3d:b2:98:98:
17:4c:52:cb:c5:a3:17:4f:c5:24:f4:50:aa:65:28:da:53:ba:
9f:5d:bb:dd:63:32:4f:8f:ea:d3:74:eb:bc:59:ac:6d:e2:79:
ae:ad:11:f0:42:75:cd:6f:bd:c6:b9:6d:00:86:d0:c2:2b:35:
d2:f3:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:42 2025 by rpki-client