Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: wYKmG3DJSOGrq+qUDhycfjnkjvsF0MpXKSUBrKshHFc=
Subject key identifier: D5:61:AD:50:52:AE:8D:82:2E:59:A9:D7:1A:2A:01:65:EE:EC:FA:2C
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 019848F7631AA520A4ADAF1806254AAE3648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: zzntCP38pdvjnX9zLCCvRKZx8P+Hm9y0VhQ+P0qrdsk=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:63:1a:a5:20:a4:ad:af:18:06:25:4a:ae:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=d561ad5052ae8d822e59a9d71a2a0165eeecfa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:3e:ff:82:90:d7:c6:6e:e0:60:6d:1d:70:
40:5c:23:29:db:11:e8:3f:ee:10:f6:1d:dc:e0:ec:
be:5f:42:28:52:00:65:f9:7d:39:28:bc:ca:5a:97:
4b:ea:a4:ee:76:0d:f7:f5:48:34:b5:eb:5f:1d:5b:
2b:90:98:b3:4d:ad:10:d2:6d:23:72:66:4c:8d:6d:
cd:46:f5:ef:94:27:8b:74:87:8f:2a:9b:27:f3:b9:
b6:83:8d:4c:70:d2:3a:18:57:78:0b:b9:3b:fd:9d:
e8:cb:15:71:63:10:84:a0:5a:09:b2:77:f1:8c:28:
c6:b9:94:98:74:53:8d:ed:ac:79:f9:ad:41:70:6b:
a5:c1:9e:78:6c:86:79:8c:4c:36:e4:52:3c:d2:31:
a7:24:54:a7:40:d7:7e:49:d4:92:52:22:31:ba:de:
12:ea:e6:ff:6f:8a:82:79:c3:06:a7:2c:40:0d:5e:
0b:3b:12:09:e8:29:46:4f:83:e8:ff:4f:fc:85:d6:
46:b3:f8:4a:c7:35:b8:01:52:fe:c0:bd:a3:bd:5a:
4c:51:38:25:b1:63:8a:6e:52:72:fe:eb:0e:58:30:
4e:24:00:4c:8f:4f:24:f6:90:a7:5b:e6:bd:9c:f8:
d7:42:8a:8b:96:c1:dc:a8:70:bc:8d:7b:51:fb:c2:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:AD:50:52:AE:8D:82:2E:59:A9:D7:1A:2A:01:65:EE:EC:FA:2C
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ef:f9:f3:27:e1:23:6e:2a:f9:1c:3e:1d:62:dd:fa:b8:41:
b8:70:6d:f8:ec:96:81:29:dd:9a:84:91:48:b7:8f:82:5e:13:
f7:a7:60:18:52:08:53:c7:2d:f9:63:fd:8f:cd:3f:d2:64:27:
18:8d:2a:76:38:df:4a:f1:6d:6b:5f:00:71:64:15:ed:ce:30:
7f:88:c5:e6:4e:f6:4a:80:71:30:da:c0:7f:dd:7e:17:00:af:
7f:ec:85:d3:61:cb:19:ba:f3:95:8c:48:37:29:8c:23:16:aa:
71:b5:3c:0d:2b:a7:3d:ab:0d:a2:d6:75:cc:c4:12:27:33:be:
f9:bf:63:a3:e6:c5:b9:87:61:61:a7:61:79:b7:e2:84:30:2f:
69:6b:aa:dc:6e:78:53:f7:1a:5d:6a:49:a5:b8:50:d4:bd:bd:
aa:2c:3a:f2:33:41:69:43:2d:7c:2b:6f:23:93:ee:a4:4e:f2:
a9:42:0a:dd:78:e1:86:5f:77:ed:43:ae:4a:de:65:e5:4e:22:
12:48:0e:7c:a9:d0:86:3a:62:50:eb:b9:b5:05:d0:f1:a1:65:
3e:60:ce:4a:08:8e:7d:7a:d5:21:53:08:96:eb:5f:a6:18:f6:
98:00:92:8e:82:de:96:3d:46:ba:81:c6:e4:7f:13:79:1c:1f:
68:98:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:45 2025 by rpki-client