Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: r1EKs+6mtrnokKNcIxqRxpp3yMMI6dpqbxXPPDZCdwY=
Subject key identifier: B3:B6:83:5B:FD:0F:D3:7F:DD:D1:FD:C0:8D:0E:97:98:81:8C:2A:31
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0198499C8A342C19FBA1F559787F36C4BE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 1339
Signing time: Sun 27 Jul 2025 02:00:52 +0000
Manifest this update: Sun 27 Jul 2025 02:00:52 +0000
Manifest next update: Mon 28 Jul 2025 02:00:52 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: zC+CvO53xnX7lMbNq6FvDDdD4OhmwWQxsSCSBEROQoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:8a:34:2c:19:fb:a1:f5:59:78:7f:36:c4:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jul 27 02:00:52 2025 GMT
Not After : Jul 28 02:00:52 2025 GMT
Subject: CN=b3b6835bfd0fd37fddd1fdc08d0e9798818c2a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:3b:17:fb:13:eb:77:8a:d2:a6:c1:89:ba:
5d:e7:22:d8:8a:c9:a7:8b:7e:33:87:d3:7c:60:80:
f0:d5:5e:15:af:cf:de:f7:44:20:4d:24:9a:71:c2:
06:56:96:e4:06:56:05:30:d6:87:63:dc:b3:91:4f:
7c:9c:a0:58:e1:bb:92:7e:8e:7b:bb:ae:81:8f:36:
4f:b5:1b:7a:77:42:bd:9c:49:25:03:c8:ee:b4:c9:
b3:7d:3c:ef:9c:2f:7e:71:4f:e9:86:bf:91:b7:2f:
bb:d4:2b:23:2c:a7:22:d1:d8:fe:4b:ce:e9:40:ff:
46:80:16:4a:ff:03:c7:eb:49:d6:25:5e:e6:73:9d:
59:f9:5d:3d:eb:d3:c6:f3:30:8b:5c:51:d4:ae:c3:
c0:9c:b8:bd:c9:c3:c0:78:52:41:4a:34:17:a4:fc:
54:02:27:fb:47:a4:74:04:ea:f9:81:e1:8c:db:47:
39:8e:78:8a:fe:51:ce:da:c4:6a:1f:1f:0a:fe:46:
24:13:c6:bd:f5:2b:cf:5a:47:13:99:a0:fb:78:af:
c5:e1:40:eb:23:ed:8c:d2:f5:63:eb:60:23:04:9f:
3f:38:da:e8:c5:3d:b1:b2:fd:29:88:00:ff:27:51:
92:84:00:f2:2c:69:c3:43:55:c6:05:be:12:0d:1a:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:83:5B:FD:0F:D3:7F:DD:D1:FD:C0:8D:0E:97:98:81:8C:2A:31
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:20:49:6e:c4:ce:ef:b3:aa:39:a0:79:d4:cb:c1:b8:58:2a:
ec:f7:9a:c1:7e:b6:50:9e:b1:0e:c2:c1:eb:7c:cc:cf:59:ca:
44:24:5f:94:6a:f5:12:4d:fc:91:2a:c7:92:50:52:71:1b:f6:
33:99:92:72:67:6e:ff:d1:17:6f:77:43:1a:6b:5b:40:50:db:
98:87:36:f4:f2:67:31:cb:21:09:3f:11:23:2c:f5:1d:16:46:
f0:d8:dc:af:97:8d:f5:0c:4b:b9:8b:df:dd:67:10:b7:af:20:
2b:4c:2e:2f:56:fc:45:bd:dc:3c:c4:7d:ec:4b:93:e5:dc:80:
b1:4b:f7:bc:74:c3:96:61:5d:74:5b:d5:80:1f:79:3e:c1:a1:
12:c9:31:c6:82:6e:90:26:5b:87:92:c8:bb:1e:f7:79:25:57:
03:dd:de:a5:b1:61:6c:37:b4:03:0d:9c:bd:1a:8a:34:95:a4:
c9:82:7e:20:f7:3d:89:50:32:a3:77:9c:f0:98:57:10:71:cc:
9c:fc:52:6e:d4:81:a5:aa:cb:cc:76:fc:3c:20:c4:bd:13:d6:
08:ee:6d:51:57:92:f6:e9:c8:78:57:85:30:30:cd:dc:34:ba:
1e:51:92:2b:af:12:28:ba:5a:ce:30:35:f2:04:25:ce:ad:57:
9b:7e:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:18 2025 by rpki-client