Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: pQm9n3vzUKs9DhsAgIitQTSs7rzoVUUTKOP4pmscRTg=
Subject key identifier: 95:39:C9:AA:05:E7:D7:78:E4:99:D6:26:33:9E:AF:DF:8B:AD:3D:71
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 0198462D7F2968ECC993BA507CB9D041A19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 10:00:43 +0000
Manifest this update: Sat 26 Jul 2025 10:00:43 +0000
Manifest next update: Sun 27 Jul 2025 10:00:43 +0000
Files and hashes: 1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: xrHmjAxFXYTQ+jvrh2vdwXrlzazax8wp1R8aLdDCxrY=)
2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:7f:29:68:ec:c9:93:ba:50:7c:b9:d0:41:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Jul 26 10:00:43 2025 GMT
Not After : Jul 27 10:00:43 2025 GMT
Subject: CN=9539c9aa05e7d778e499d626339eafdf8bad3d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:ba:e9:46:82:5d:a1:b8:f1:a6:84:26:f1:
7f:1d:92:a2:41:51:b7:20:17:21:d5:4b:ea:ef:e5:
8b:83:47:f5:1d:20:e4:52:9c:3d:29:6c:00:89:f5:
c8:f1:20:48:14:2a:45:e3:d7:8b:a4:1c:2f:81:ae:
28:a5:6c:9a:62:c0:5b:5e:cc:f7:f7:78:94:ac:27:
d0:70:06:37:79:65:37:66:db:f3:eb:7a:e8:0a:83:
49:09:f4:80:99:f9:cf:85:3f:26:8e:a2:0d:cc:f0:
f3:14:c5:e2:27:d4:27:cc:0d:43:02:21:d5:b0:5c:
4c:ea:99:de:9e:8b:48:2d:3a:a7:78:29:44:b5:da:
09:87:20:c1:58:cb:55:2b:e0:a8:c7:99:10:87:43:
42:39:fb:38:c2:fb:d6:e6:68:4d:94:1d:92:60:b5:
4e:a8:49:5c:94:60:02:c8:f9:d3:bb:c7:b4:95:4a:
69:f0:ae:ff:ce:b6:3a:e0:25:2d:33:f7:59:9f:1b:
bf:cb:4d:43:e4:ce:31:1d:2f:35:db:39:7a:ed:a4:
8e:4f:64:b1:b2:a5:a3:cb:a6:d6:d2:2e:1b:e6:27:
99:4e:f2:c2:9e:da:0d:b6:d0:dc:54:03:a8:c9:9b:
e3:e0:9d:9c:26:70:5a:c9:0e:b4:db:d1:4e:23:e5:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:C9:AA:05:E7:D7:78:E4:99:D6:26:33:9E:AF:DF:8B:AD:3D:71
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:e9:5b:0b:ad:a0:e5:95:20:c4:92:fa:25:45:e9:67:5f:
74:f1:c7:c3:47:55:db:ac:9e:fa:33:a1:51:2f:62:99:41:85:
03:96:13:cd:da:83:2b:c4:94:86:88:cc:05:2c:3b:96:45:af:
b4:13:ba:4a:f9:ff:db:65:61:31:7d:7e:f4:73:e4:56:28:86:
8a:3f:8e:d7:11:18:9e:13:37:71:4a:89:c7:fb:cd:f4:14:69:
c6:1a:3e:4d:e2:d5:50:30:b5:fb:dd:33:6f:be:ed:c5:e3:cb:
7a:29:72:de:88:88:1a:6f:34:a6:4c:71:e0:59:d6:9b:1c:99:
28:dd:15:da:e0:e3:c3:97:44:a2:9a:9d:c5:49:b0:91:da:a9:
b5:1c:bf:74:40:1d:0f:bf:2f:28:56:13:a1:cb:22:28:de:0a:
d9:68:6d:c3:1d:eb:f2:1e:75:ea:a7:c5:3e:50:8a:0b:37:ed:
1c:16:a4:63:4b:29:c1:26:e6:32:17:cc:10:db:c9:7e:5e:97:
1b:21:9c:e7:29:2f:d7:20:38:18:c8:d8:89:b7:6d:1c:94:ba:
e3:fc:9a:70:6b:37:ad:5f:00:90:4e:eb:00:f2:7c:6c:58:d2:
34:d1:1d:fe:83:bb:1f:5e:84:04:1a:64:b9:da:7f:52:5b:46:
b0:c3:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:55 2025 by rpki-client