Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: 9Q13xxKE2WKXrHf7s9ZVrq0D/mR1NOF5l4s6TsxPHeQ=
Subject key identifier: 74:5B:4D:7A:E9:F2:5A:FF:56:12:F1:D9:6C:8F:08:2E:10:2F:93:FE
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 01984B53B2F47834D5D9D65C2F5DA4B484DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:33 +0000
Manifest this update: Sun 27 Jul 2025 10:00:33 +0000
Manifest next update: Mon 28 Jul 2025 10:00:33 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: WKQRDaNOi3kST8aQYB3UcYZJJFMzgeVUjiiNzAqHDs0=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:b2:f4:78:34:d5:d9:d6:5c:2f:5d:a4:b4:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jul 27 10:00:33 2025 GMT
Not After : Jul 28 10:00:33 2025 GMT
Subject: CN=745b4d7ae9f25aff5612f1d96c8f082e102f93fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:7f:d4:d8:99:12:12:84:ad:41:b9:7b:20:
80:da:86:94:0e:83:6b:ec:95:40:69:26:54:2e:c2:
86:6d:59:af:7e:7d:b6:57:5f:04:1e:67:7d:3d:7c:
56:0f:8f:e8:13:9c:9f:46:1d:70:bc:8c:4f:67:4d:
9f:9d:66:20:21:2a:a2:09:23:da:e4:7b:e6:61:83:
e3:e7:5d:46:e5:1f:79:d0:aa:2b:23:4f:1c:81:a4:
ef:65:ef:5d:e4:24:cd:1c:a2:07:07:dd:ed:09:a6:
7d:ce:29:88:5b:4c:df:ac:f1:65:43:49:7d:7d:79:
a1:89:9e:ea:59:8d:56:be:07:dd:56:a1:b5:91:9a:
24:c4:19:9f:32:46:d8:47:bd:43:99:b1:7d:1c:e3:
70:b5:d5:04:49:06:20:2b:84:60:da:f0:78:5b:34:
18:4a:95:60:41:d6:98:0f:87:e4:15:49:cd:bb:46:
fd:d1:8f:96:f8:3c:9d:3c:fb:e9:db:3f:24:78:9f:
0d:02:da:86:c4:38:0a:a7:a4:b7:38:1f:17:c3:0f:
60:0f:f7:50:7c:15:4b:9d:9a:f6:7c:47:67:f5:d6:
a2:02:51:f5:a7:cf:7f:e6:34:fc:d1:c4:c2:68:68:
73:37:5c:39:e2:83:e6:dc:7a:f3:6f:90:dc:1c:0e:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:4D:7A:E9:F2:5A:FF:56:12:F1:D9:6C:8F:08:2E:10:2F:93:FE
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7f:d0:2f:8b:6e:de:05:6e:13:1f:dd:4d:98:e7:75:1e:34:
11:cc:1e:87:4c:0e:ee:b6:46:2f:eb:9e:57:db:3c:67:a4:53:
7f:15:e3:27:ba:3b:e0:56:e2:e9:4f:75:c4:64:dd:6e:04:5b:
63:54:7f:91:82:f4:c8:f8:e0:3b:13:bf:7f:88:4f:3e:98:38:
63:25:c0:e7:15:6e:b4:7f:14:6e:ff:62:50:0b:8c:57:2c:22:
9a:57:41:7c:94:a9:c2:2b:b0:41:f8:a3:f5:4f:78:7f:73:15:
eb:29:30:34:72:6a:a1:b9:9f:5d:6d:ba:a2:90:12:08:dd:4b:
c4:24:8c:6b:67:a4:23:2c:3b:a0:a8:d1:9c:dc:94:cb:5e:1b:
e1:f1:ad:3f:24:67:87:f5:00:53:e0:54:ab:40:92:2e:3d:33:
f9:8a:b2:50:7b:ae:4b:a3:8f:46:b2:df:7b:61:4c:1c:a5:61:
e3:d8:cf:fe:3f:72:f9:7a:b8:e6:d4:03:32:5e:77:ad:23:8a:
4b:ff:f7:6b:cb:5f:ad:ec:10:02:d6:22:ba:cb:fa:4e:99:6d:
a3:a1:7a:e4:11:3c:92:0a:c9:68:49:b9:2b:d4:40:42:63:64:
f0:00:6f:ba:6b:b1:9b:b0:62:71:ab:69:aa:d8:bf:38:cd:21:
16:6d:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:05:52 2025 by rpki-client