Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: VAmj6qoo//bztLwUeAEXMDhZVZEsxPe6Jiot/Wfzb2U=
Subject key identifier: 00:D4:EB:C0:14:9C:EF:36:00:F0:8E:87:F0:C6:DF:9B:50:7F:CB:6D
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01984A0A65E4B457AF4E831004CE6CD79D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 167D
Signing time: Sun 27 Jul 2025 04:00:52 +0000
Manifest this update: Sun 27 Jul 2025 04:00:52 +0000
Manifest next update: Mon 28 Jul 2025 04:00:52 +0000
Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: ODd1arV3ZXrJqvXEp2UhU4Um2O7H5gEIthiBKnGVTv8=)
2: SXG-e2hHIIAl-yj4qBi6FUi9wGY.roa (hash: +fTL7yItTRc/AAESJMlIEyzwJCD39qE6Ysoda7xR64c=)
3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=)
4: weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa (hash: ++9M17cqnkYizKWfJDJXuz+WROEMWThTBlJS5u4HdI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:65:e4:b4:57:af:4e:83:10:04:ce:6c:d7:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jul 27 04:00:52 2025 GMT
Not After : Jul 28 04:00:52 2025 GMT
Subject: CN=00d4ebc0149cef3600f08e87f0c6df9b507fcb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:c2:7e:b9:71:d5:03:d7:04:74:99:9c:ce:
a7:e5:b9:31:33:80:ce:52:f6:5d:a9:ba:92:6c:bc:
cf:ae:aa:fd:91:07:0e:5d:32:4a:40:e6:6c:66:6e:
33:62:16:67:2c:cb:05:7b:32:60:d4:4a:6f:7a:63:
64:0b:06:a8:fe:ab:de:80:fb:bd:cd:e6:d1:4e:c9:
36:96:12:93:81:d7:bd:64:f8:3c:b3:c6:e2:a3:b5:
f8:07:73:d7:e2:a5:83:46:74:c5:35:a2:36:c4:bb:
1c:b6:dc:43:37:ca:af:c9:8a:6c:d0:0c:ec:ff:24:
bd:2e:90:b4:73:be:ca:6e:d8:99:a3:0b:b2:b6:94:
d8:53:e0:c7:46:43:d3:bf:de:9e:55:c3:67:53:51:
c8:3d:f9:11:d7:24:d2:6d:79:af:3d:d6:70:6e:1c:
4d:2b:6b:4d:f4:a4:57:04:5a:28:9a:3f:f6:75:c5:
b1:f8:4a:1e:db:e4:30:dd:3b:30:31:b0:09:12:f4:
66:be:c6:d7:be:1e:19:6f:ad:1c:f7:61:56:a1:ec:
64:c6:d9:5b:7b:02:3e:ad:77:54:8d:d2:09:f0:77:
e9:4c:56:80:dc:74:e3:2c:2e:70:45:38:3b:bf:04:
63:82:30:fb:c6:cd:a7:4f:33:5a:32:49:27:8e:12:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:EB:C0:14:9C:EF:36:00:F0:8E:87:F0:C6:DF:9B:50:7F:CB:6D
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5d:4d:a6:4a:95:ba:37:b8:cb:7f:40:1d:2a:f8:cd:fb:94:
22:43:48:b8:a4:ab:f3:2e:f8:f6:25:28:2d:7f:7a:52:68:30:
67:1c:e2:de:24:06:ed:af:70:2e:84:c8:52:4e:b3:e4:4b:90:
02:64:ce:6a:5d:6a:c3:03:f2:50:5b:97:1b:6d:b3:53:4d:a4:
a5:3d:a7:b7:8b:35:80:0c:fc:99:e1:0f:06:ea:e7:9d:6b:27:
28:53:ab:6b:bd:8f:58:86:b9:ee:56:2c:15:f1:d8:5c:c7:50:
d4:a0:b7:0d:7c:13:c9:30:db:20:c9:f6:40:c9:48:97:b5:d2:
58:ca:54:ed:7f:00:11:0a:6a:a1:50:a7:b9:8e:60:8c:39:4d:
ad:51:d1:48:67:1d:48:8f:11:d2:21:f6:9e:b8:5d:9a:7d:a8:
f1:48:dd:a7:cb:92:0f:e5:d7:22:01:b5:cd:d9:ba:46:99:b0:
16:c3:ad:84:b3:c2:7e:bf:3b:a2:f3:9a:91:f1:30:d9:e9:ef:
7b:0d:7e:75:d6:95:02:66:eb:2f:aa:f7:dc:6d:86:8e:d8:3e:
40:67:f9:af:21:10:30:2c:2f:7c:d4:0b:13:18:17:a8:91:52:
1e:de:f8:7b:17:ec:68:ac:ae:53:13:d9:ee:0e:17:3b:e8:31:
30:1a:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:18:57 2025 by rpki-client