Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: 1SrX12UoimlKKtiAU66TQDSMBY/0FH6wF8QYefPXJAw=
Subject key identifier: C8:E1:4B:93:7B:36:98:19:DC:7A:20:18:61:9F:96:3D:DD:9E:05:2C
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019849667973F96832E20C51B026C7433996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:01:49 +0000
Manifest this update: Sun 27 Jul 2025 01:01:49 +0000
Manifest next update: Mon 28 Jul 2025 01:01:49 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: CCdGB5vnJivos1drrVyTpJiAnfURhbAXpYj5WVbrCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:79:73:f9:68:32:e2:0c:51:b0:26:c7:43:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Jul 27 01:01:49 2025 GMT
Not After : Jul 28 01:01:49 2025 GMT
Subject: CN=c8e14b937b369819dc7a2018619f963ddd9e052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:47:b7:fd:dd:f1:13:fe:ba:7c:39:a0:d8:
90:7c:19:00:96:fc:59:f5:19:7c:18:e7:d7:2f:a6:
75:c2:bb:92:97:ad:0f:8e:c9:a8:b2:28:fe:ee:ff:
80:81:17:3d:0c:ce:3b:01:16:ba:6c:77:9e:5c:9b:
e6:3b:23:ff:d2:8e:02:b3:53:cb:72:d5:68:23:cb:
0a:52:cf:8e:cf:95:2b:d3:57:17:ea:21:c1:a1:bf:
95:18:d5:8d:ac:67:e6:ad:1b:6f:91:72:1a:d5:a7:
ad:f4:0d:30:7e:bb:de:c0:34:5a:ef:39:44:bb:ed:
9f:ca:ab:0b:aa:76:d4:38:96:68:14:66:1f:df:b3:
90:53:3e:3e:7c:19:7f:6e:ab:1b:64:88:b9:77:f7:
ec:d8:a2:98:35:b0:0d:29:dc:1a:ca:4d:6a:40:86:
10:37:41:f8:41:7f:be:d9:f5:af:66:10:ce:16:ee:
7a:01:43:a0:17:e6:bf:09:83:b6:a6:5f:54:eb:76:
c6:30:39:cd:c5:58:4b:2c:48:97:89:d4:8c:44:00:
75:fe:08:ff:3c:39:55:90:40:8c:4b:1f:48:76:78:
f5:a4:4c:27:6c:9a:fb:1f:c2:9d:0d:d4:10:c4:7a:
04:6d:a7:ec:05:ad:4e:e7:aa:81:8f:68:fb:4a:0a:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:4B:93:7B:36:98:19:DC:7A:20:18:61:9F:96:3D:DD:9E:05:2C
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:ae:3b:d3:30:b2:cc:e6:02:5e:96:99:9e:d1:3b:6e:21:
73:90:98:b2:c8:ce:02:06:2f:ae:3b:44:13:f1:44:a2:49:0a:
8d:32:36:7d:21:93:69:a6:c3:ee:cb:fa:55:a8:25:b1:35:28:
ba:67:a6:59:94:0e:d5:7f:cd:59:b5:b8:21:04:af:ab:3f:50:
25:68:22:08:84:8e:cb:93:42:c5:da:a8:b1:ca:44:d4:46:ab:
15:a6:c5:14:24:55:94:24:fd:95:1e:63:03:48:4b:94:25:35:
3c:65:4e:36:1b:a5:c8:ed:bf:7a:49:8b:1a:b5:d2:8a:8a:36:
a0:19:10:b6:6e:09:3a:dc:98:24:e8:84:c7:78:68:76:ff:05:
3e:3a:b9:65:7b:a7:25:9c:7b:7c:de:cc:27:af:f8:46:5e:09:
44:52:93:ac:f5:c8:a3:8f:b3:24:2e:ed:f7:09:f6:ba:b7:a3:
9c:85:ad:05:79:81:54:28:cf:f0:6b:6c:37:ae:ff:05:0b:39:
ad:66:c7:fd:3c:14:83:3b:33:f9:f3:36:e2:68:fc:40:45:7f:
08:98:a6:4e:0d:e0:8b:65:98:84:0c:96:56:e9:50:fb:25:44:
62:1a:57:78:ea:e0:97:6d:23:05:78:6b:e5:c0:4b:78:67:6e:
4a:fa:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:24 2025 by rpki-client