Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: RyNGShk1pnATqXZAXYdgzsuByfJ57Ync83G9G5PobyQ=
Subject key identifier: FB:78:06:96:5B:BA:06:FA:19:D8:7D:78:F4:6C:78:08:E3:D5:24:50
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 0198548D8329A2E374D15207281A418BD232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0A5C
Signing time: Tue 29 Jul 2025 05:00:16 +0000
Manifest this update: Tue 29 Jul 2025 05:00:16 +0000
Manifest next update: Wed 30 Jul 2025 05:00:16 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: tRBBnH/NFPufBTN2wP4GqmgVL8HghCaAnQsvpfOSEMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:83:29:a2:e3:74:d1:52:07:28:1a:41:8b:d2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jul 29 05:00:16 2025 GMT
Not After : Jul 30 05:00:16 2025 GMT
Subject: CN=fb7806965bba06fa19d87d78f46c7808e3d52450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:1a:b7:5d:98:d2:e5:a5:9d:a4:56:59:15:
c6:51:a8:d5:fc:70:08:d7:9e:62:01:ab:50:56:21:
e7:8b:eb:f4:16:9c:27:38:1d:ed:ba:4f:a3:15:55:
de:ce:d0:f2:2a:ee:69:da:f5:6c:ca:17:1f:e5:fa:
37:a2:5b:df:96:2a:46:5e:e6:7f:5d:a7:28:10:d2:
13:e8:b1:17:ff:5a:82:d0:a2:c4:11:39:bc:84:c2:
70:16:23:29:cb:08:da:d1:b8:23:84:2b:2c:1b:11:
ce:25:31:9a:35:34:22:50:dd:3f:ab:5f:d9:eb:40:
52:90:43:6b:83:77:50:7b:06:77:13:d3:0a:f5:99:
50:27:b5:57:87:4f:bd:66:f9:92:d8:58:4b:6a:bd:
7f:cb:13:e4:fc:18:16:d7:a1:a3:69:a4:14:5c:d2:
62:5d:2f:07:11:7e:a4:8f:4d:9b:0b:3b:11:52:a4:
f5:f5:c1:13:68:ce:a1:0b:5f:95:ed:49:90:6a:f6:
ca:b1:17:6a:b3:9a:37:d7:65:c0:aa:73:d0:64:11:
2a:91:c3:4a:ed:3e:c0:3d:06:39:d0:ca:6f:81:ce:
9f:10:e8:e0:04:2c:3f:75:46:8b:8b:11:99:f2:01:
90:81:0a:ed:f1:db:99:14:03:ee:d3:8a:b3:22:23:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:06:96:5B:BA:06:FA:19:D8:7D:78:F4:6C:78:08:E3:D5:24:50
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c8:d1:48:fc:8e:02:47:60:b3:6c:37:9f:07:c1:e5:4b:15:
7f:cd:dd:de:0f:be:26:b7:c9:64:a7:f2:f8:ed:de:96:a4:aa:
b5:1d:02:b3:9e:66:8e:79:e0:86:7f:5b:51:d6:db:69:ce:90:
66:fa:92:c9:ca:9d:99:2e:aa:16:2d:6e:7c:8f:81:78:70:60:
cf:17:8c:ca:fd:f6:fa:87:6a:41:f6:c5:45:50:97:2c:ee:c7:
25:06:8e:cd:fd:c8:bc:59:f4:d8:4e:1d:84:88:c7:bd:48:24:
58:bb:9e:2f:6a:74:f6:eb:f9:53:4b:bd:a3:c3:4f:4e:26:3c:
ed:37:df:a6:8c:ff:e3:da:b7:42:2b:12:f2:38:e2:86:fa:6a:
51:95:d2:5b:65:db:63:d5:02:e6:17:ea:1f:bc:78:0e:b9:3e:
77:cc:35:70:60:02:f4:67:36:e0:c1:34:00:0e:49:7e:1a:1a:
0d:04:61:19:2f:7e:d8:24:96:00:ff:12:43:89:b5:60:25:ac:
0f:89:e9:0b:81:24:a2:12:d9:0e:22:59:d7:84:b0:01:d7:52:
da:d3:8f:20:b7:5f:68:bf:b8:eb:18:c0:7b:0a:11:11:2d:a9:
74:b0:0e:0b:e6:a4:62:3f:b1:b5:10:dc:fb:a9:cf:5b:56:b1:
03:a9:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:17 2025 by rpki-client