Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: SJE5dqzoYCSsm5dAPnqVRu4z/dMEV4NNwTk6t3j1WG0=
Subject key identifier: 29:AF:FE:37:0C:E4:CA:AC:B5:9D:05:92:00:6D:B4:91:BE:90:7C:F2
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 0198542007A5E7C5296A695F5B9A6DAF5438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 03:00:41 +0000
Manifest this update: Tue 29 Jul 2025 03:00:41 +0000
Manifest next update: Wed 30 Jul 2025 03:00:41 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: N+Mr/J8xujyBJQzwM1kpJHpKnp30vQ63s5TCEK2z0mw=)
2: JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (hash: I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=)
3: uttZJDL3LQ7QDxUT6eilC7zrvqs.roa (hash: w5gBSlKjA5Lu1HULnBbNVdum/zMpOaAXAiNTMSLvzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:07:a5:e7:c5:29:6a:69:5f:5b:9a:6d:af:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Jul 29 03:00:41 2025 GMT
Not After : Jul 30 03:00:41 2025 GMT
Subject: CN=29affe370ce4caacb59d0592006db491be907cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:12:dd:06:97:b4:f1:1f:29:41:6f:77:08:
23:a0:5d:8e:90:db:ee:9f:d1:9f:de:71:74:76:d1:
56:f3:db:13:a2:f8:0c:d9:17:28:78:c8:90:54:dd:
b2:fb:b6:f8:21:8d:df:d8:12:44:47:00:97:fe:82:
66:d6:cc:9c:45:ad:66:f1:ad:67:9f:66:05:1a:ad:
0a:56:0f:25:c0:69:04:cd:ab:69:72:c7:16:12:b6:
fb:1e:de:9f:fc:b1:fd:13:53:1c:68:1a:d8:e0:57:
44:1b:1f:d6:c5:f7:48:45:1d:f3:0d:8b:02:db:d8:
cb:6a:27:58:90:8e:38:01:13:a6:93:32:81:3c:e4:
f3:b9:20:0f:40:b6:4c:aa:82:c9:78:60:e1:cb:b5:
93:b4:5a:34:e7:0a:97:e1:f1:96:f4:7a:b7:85:91:
ca:b6:8e:2a:2b:2c:3d:e8:f4:22:19:3d:37:df:9b:
71:93:51:d7:75:00:da:e0:d5:53:46:20:9e:74:73:
c2:2a:7d:84:56:17:31:5b:44:9f:82:16:81:c0:ba:
82:56:28:6f:e3:40:45:ee:cb:fe:dc:ac:dd:84:cf:
f1:d6:13:6a:f0:53:6d:bc:c2:c1:3b:c7:49:78:d6:
71:99:31:7e:4f:36:0e:40:4d:fa:13:96:87:65:ec:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:FE:37:0C:E4:CA:AC:B5:9D:05:92:00:6D:B4:91:BE:90:7C:F2
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6b:52:93:cc:3d:e4:25:a6:8d:94:c7:80:33:d7:fc:5b:4c:
9a:36:d6:1b:86:7a:9c:45:31:03:1c:08:c3:0e:e4:0a:70:5b:
ed:85:28:b8:92:2b:b1:2b:49:8d:ed:d4:56:37:bb:21:12:1c:
cc:29:99:ae:1d:b8:05:e8:0b:a6:f9:c8:0b:4e:24:1d:0c:21:
a0:3c:a8:b2:c0:54:54:2e:ac:04:a1:35:e9:cc:b4:55:df:44:
80:66:86:62:62:3c:d9:6f:56:b3:27:70:be:e7:70:00:96:75:
e7:57:84:15:d9:fb:d8:80:0a:ef:37:91:ab:95:ff:85:2b:44:
f5:17:07:9a:54:4b:51:40:5b:c9:c8:1b:75:17:d3:76:d1:a3:
a8:a0:4f:1a:bb:15:17:dc:fc:d8:60:d6:c1:35:c5:64:39:f0:
f2:21:bc:87:a1:df:77:88:c8:f5:ba:0f:c8:eb:b9:0e:7f:86:
8f:ed:ff:52:e4:ee:53:03:70:ef:93:33:3a:bc:35:2d:6a:1b:
04:08:8c:d7:82:c2:8f:e4:9a:f2:79:ef:ad:2c:d8:a5:e9:7b:
c9:8f:c4:08:11:fb:43:0f:d5:d6:9d:99:6c:e4:03:75:7c:5b:
1c:80:88:94:1a:2a:94:35:55:50:32:7a:7c:fa:e5:63:ae:eb:
3d:4f:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:52:58 2025 by rpki-client