Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: Q4+g5BRQXrd1Wfwm9LK5Y1QL5PRwRbhZLuYgJJgkVdw=
Subject key identifier: 52:EE:AD:21:5E:29:A8:7F:D4:11:15:B2:1D:1B:AD:49:B0:07:6B:D6
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019844089AA7E6620C9F4DE399B5B64F89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0652
Signing time: Sat 26 Jul 2025 00:01:11 +0000
Manifest this update: Sat 26 Jul 2025 00:01:11 +0000
Manifest next update: Sun 27 Jul 2025 00:01:11 +0000
Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: BZK++RWt7DjtOmz5WbwGcRnJwO8Ezpb+bBzEmAx1QrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:9a:a7:e6:62:0c:9f:4d:e3:99:b5:b6:4f:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jul 26 00:01:11 2025 GMT
Not After : Jul 27 00:01:11 2025 GMT
Subject: CN=52eead215e29a87fd41115b21d1bad49b0076bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:a1:8b:f3:e8:73:53:54:f4:a6:23:18:ce:
e9:12:8f:1c:34:77:cf:e2:d6:9b:8b:c2:46:90:b9:
6c:4a:c1:b9:7b:92:d5:76:d5:e2:44:42:f5:3d:51:
26:01:49:d6:07:a2:42:95:56:90:da:9e:5e:00:5d:
29:1a:ac:98:25:ec:09:ca:67:72:4b:7e:71:a0:37:
ed:59:56:5b:aa:d4:51:dd:ea:12:35:4c:73:b3:3f:
0b:05:3b:55:57:7b:42:89:26:de:43:0b:53:a6:70:
46:26:3b:91:bd:fb:88:c1:33:a0:f7:6c:5b:ad:73:
d9:58:9e:da:dc:07:fd:13:10:73:80:d6:a9:c3:c0:
c7:e6:64:53:da:c2:76:5a:ee:9d:f3:dc:7e:1d:b9:
fc:dd:44:83:f8:c7:df:3b:38:ec:0a:ae:27:84:b8:
eb:4c:60:90:e4:ea:b9:36:c6:02:04:a8:74:07:64:
35:5a:9c:9e:40:6d:10:b8:4a:6e:9d:b2:c9:67:fe:
5f:ca:25:37:0b:39:f2:37:f3:34:bf:1e:44:d3:b2:
1a:e9:7f:d7:be:24:54:9c:d2:91:63:0f:75:80:a0:
0a:ec:9c:4c:d1:30:64:10:58:c2:6e:07:a9:3f:7c:
c6:12:16:d3:5b:d9:5d:05:56:bf:b6:a0:5f:d7:b3:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:AD:21:5E:29:A8:7F:D4:11:15:B2:1D:1B:AD:49:B0:07:6B:D6
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b8:21:e4:b1:40:7c:f6:76:c2:a6:35:bc:59:7b:21:79:73:
fe:9f:ad:7d:f6:6f:8d:c4:63:2a:4d:a8:6b:da:c9:23:60:c7:
1f:6c:94:41:87:7a:4c:3d:21:0a:33:36:38:da:a5:c0:0f:02:
df:63:53:d0:de:bf:bd:6a:4b:d8:c2:67:f5:5d:06:60:56:a4:
ee:5e:ec:ac:f7:49:b1:2c:dd:cb:d1:86:f3:da:6e:01:64:04:
fe:6e:13:4a:69:86:41:ac:9b:d9:92:62:3f:ff:79:ec:d6:68:
e7:16:ee:b0:73:b8:31:d5:c9:76:95:d0:5b:1a:d5:31:82:79:
35:1c:bf:79:dc:94:1b:2a:45:8f:95:7b:28:b2:85:94:05:0b:
c3:da:ef:a5:0e:b3:1e:d2:1f:ef:e2:3f:06:14:7e:53:b5:67:
67:59:f3:e4:2c:d3:5c:10:76:54:44:1a:60:bc:3c:61:62:23:
48:4d:37:60:1e:ec:e1:4f:72:49:8f:b4:33:3d:84:17:b2:8f:
1a:a1:78:f2:e8:01:b9:30:c9:5b:1b:6f:58:79:19:e5:11:6a:
5a:71:92:a6:5b:60:9d:93:33:8d:84:86:1a:c6:a6:cb:23:43:
a5:d6:8c:4d:6b:50:c0:3c:c1:84:f9:15:6e:0d:8c:c7:36:a6:
28:12:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:27:32 2025 by rpki-client