Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: noT8v9eFSMOwCqok9TOGmmMLAu7HvNW6kG8HFLnnGqo=
Subject key identifier: 2A:1F:3A:29:FE:81:5D:F7:DD:D8:CB:50:0C:38:3C:84:3E:09:EC:70
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 01984852E0E906C732FA8C8EB64C6FE6789C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 05DA
Signing time: Sat 26 Jul 2025 20:00:47 +0000
Manifest this update: Sat 26 Jul 2025 20:00:47 +0000
Manifest next update: Sun 27 Jul 2025 20:00:47 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: /g4moF5dceMdwNYMvLErQ1vnBxPFgZQhCin3k/5SgNs=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e0:e9:06:c7:32:fa:8c:8e:b6:4c:6f:e6:78:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Jul 26 20:00:47 2025 GMT
Not After : Jul 27 20:00:47 2025 GMT
Subject: CN=2a1f3a29fe815df7ddd8cb500c383c843e09ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:a4:a2:73:67:1f:a1:fa:e5:d9:39:49:06:
23:a2:b1:48:87:61:f3:6c:fd:d3:32:c3:7b:ba:a3:
09:b2:e2:6e:63:81:cd:77:25:e6:a1:99:1e:21:2b:
a9:bd:6b:46:1c:0c:25:bf:6d:87:6a:46:11:15:a7:
15:02:e1:1b:54:f6:76:3d:7b:e3:d9:ba:6c:89:3c:
70:a2:fa:33:6d:ec:78:ba:0f:c9:b8:6d:bf:24:1e:
66:45:ff:3b:d4:70:1a:8e:2a:7a:57:a5:9a:41:40:
31:40:63:79:4f:56:43:2b:c6:92:19:8a:e6:3b:ad:
ed:0a:f3:10:1c:58:75:25:81:93:48:67:e0:8d:4b:
d6:00:df:0f:d6:cf:88:75:9f:0a:4d:19:0f:24:4c:
d1:8d:71:af:c2:2c:64:7e:2a:0f:2e:2c:74:9a:49:
4d:f3:39:5b:65:df:c6:9b:79:8b:30:e2:10:0f:59:
ca:7c:44:13:54:04:d9:74:fd:34:ff:71:36:8f:5d:
1f:d6:3d:10:b9:b5:0a:92:4e:35:1c:42:6d:9a:29:
70:47:bb:a0:c9:7f:4b:be:8c:36:46:2b:61:7d:46:
67:a6:6a:3c:bb:cb:e5:65:67:73:20:07:36:ed:91:
d6:6b:47:be:c3:a5:a2:ad:ea:15:5d:9c:ec:33:55:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:3A:29:FE:81:5D:F7:DD:D8:CB:50:0C:38:3C:84:3E:09:EC:70
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:8f:0f:a3:6f:fc:07:ad:be:79:95:2f:33:8f:ee:34:12:
5d:3e:61:58:99:85:0f:cd:be:07:98:ab:48:0d:40:a8:45:b6:
19:83:a0:41:6e:07:7a:53:7e:d0:1b:d4:e0:3f:c2:cb:2b:42:
b2:c7:b2:66:7d:cb:fd:f2:24:ec:e5:28:73:57:17:80:d0:e5:
a6:c2:27:66:4b:ea:4c:f2:be:08:9f:5f:46:84:55:4a:12:7f:
1f:98:8f:43:50:cf:40:d1:5e:e3:b8:d1:df:2d:4b:72:f9:f8:
fc:20:a2:84:34:dd:c2:74:e2:53:06:33:87:4b:c9:93:d2:a6:
ba:d2:73:7c:7e:ad:8c:e5:a7:6f:71:f1:fd:c9:32:b2:e2:53:
f5:53:bc:ad:40:0e:02:4b:de:40:3c:ba:aa:9f:d0:28:c1:92:
b8:5e:8f:11:d1:0c:a5:1d:ca:b8:8b:cb:10:eb:61:6e:ce:d6:
f2:8c:25:51:8a:81:c7:90:0d:62:74:08:c7:62:33:9f:64:39:
0e:c8:f7:a7:bc:63:91:7a:ff:59:24:bb:43:b4:78:ce:71:af:
2c:ad:62:0a:32:b1:ee:da:fc:9b:b2:c4:48:92:c8:e8:82:90:
88:0d:92:cd:60:3d:e8:56:2e:ee:a1:e5:63:23:48:f8:09:99:
d1:2e:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:04 2025 by rpki-client