Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: aOUzF6tmtzstXHRAgQ3Km5Aqs6tHJk1faNwGWuBSX3I=
Subject key identifier: 69:E9:92:20:BA:C9:80:6E:6D:54:A5:89:EC:92:2E:21:4F:9E:7F:47
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 019826A2823DA904B5F618CD7E797B80F118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 15A8
Signing time: Sun 20 Jul 2025 07:00:40 +0000
Manifest this update: Sun 20 Jul 2025 07:00:40 +0000
Manifest next update: Mon 21 Jul 2025 07:00:40 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: h0Q3BwV1xFMNyoGm5TkDZfJJGCiqsHqqj+3v6jXlPQY=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:82:3d:a9:04:b5:f6:18:cd:7e:79:7b:80:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Jul 20 07:00:40 2025 GMT
Not After : Jul 21 07:00:40 2025 GMT
Subject: CN=69e99220bac9806e6d54a589ec922e214f9e7f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:e9:c3:20:63:71:48:ca:d0:06:21:ae:12:
5d:cc:7b:0b:5a:0b:f7:42:06:63:7c:cb:e0:2b:10:
d6:84:c8:b5:15:a2:5c:b5:ff:b9:2a:20:ad:04:51:
4e:c2:17:f8:85:c7:a3:5b:95:c1:27:5a:7b:3c:d2:
5f:42:f2:70:29:2f:26:dc:ef:eb:18:a5:00:a8:e2:
1d:27:29:f7:7f:58:54:72:b9:cc:a5:d5:8d:b7:83:
40:94:44:10:28:3d:93:ff:16:11:4b:50:82:3b:40:
45:02:3e:8e:0d:8b:8f:ee:84:8b:f0:9b:25:2f:cc:
50:41:ed:10:91:0c:2c:99:3e:d7:99:51:dd:d2:d5:
eb:00:38:49:bd:7c:38:2d:3d:6b:fe:84:6b:05:ad:
eb:35:a8:ae:02:db:7a:68:d3:75:27:83:9b:4b:9e:
53:77:af:19:1c:ec:eb:b9:02:50:6e:12:71:16:43:
be:92:13:c4:db:90:a1:ae:a7:0d:19:c8:04:73:b1:
3b:98:c1:04:10:9a:2d:12:14:39:f0:56:02:ef:3d:
80:8f:39:07:34:74:7e:43:e6:28:da:f5:48:ce:b6:
33:7e:74:22:6f:78:6b:db:ec:5b:8b:19:ef:ac:98:
e8:94:ad:ae:82:fc:d1:6a:57:d1:1d:58:62:c1:33:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:92:20:BA:C9:80:6E:6D:54:A5:89:EC:92:2E:21:4F:9E:7F:47
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:bb:67:ff:b1:25:0d:a7:c8:3e:7d:7e:83:c6:b6:4e:66:
55:f5:0d:07:51:7d:ce:71:cf:d9:ff:9b:79:cd:b0:26:91:28:
1a:8c:ec:2a:21:df:0b:0b:19:ce:d8:3a:47:70:fd:ab:18:f2:
a8:ec:52:f5:c5:a8:28:13:cf:50:7b:b1:65:e1:4b:e4:e4:31:
d0:50:9d:b2:cb:22:d8:f0:c7:c6:8b:16:6c:26:0e:90:38:a3:
1f:d2:42:44:af:68:83:12:b9:98:3b:d1:43:7b:2b:e0:15:d0:
01:b2:2a:b1:07:f2:dc:02:36:84:0b:32:f8:8e:16:2c:91:3d:
4e:0a:0b:2e:c3:b3:1d:75:75:b2:04:e4:fb:eb:4f:3f:af:62:
b0:34:04:ea:fd:9c:1a:9a:97:1f:6e:a5:9e:27:66:38:4d:b3:
81:9a:e4:15:7e:6d:a3:11:4b:4f:c9:ed:87:14:5e:30:b8:fd:
10:11:44:e6:a4:c2:31:bb:a6:96:4e:5d:be:fc:75:c0:75:1e:
a9:0b:84:14:78:68:d0:ba:29:d3:32:5d:8f:28:0d:8d:e5:4f:
a5:91:c1:42:eb:b7:4f:38:cb:23:c2:bf:c2:07:eb:cc:b4:59:
c2:67:d0:78:59:23:44:74:36:a1:7e:c9:7f:c2:a8:8d:91:9f:
df:b4:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:32:43 2025 by rpki-client