Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: FlHF3Regy45O+6w5KT9mZmpJr3bfaTzZ6BfVpzQfO5M=
Subject key identifier: 75:04:C2:F0:E0:CC:2A:3C:85:DA:50:92:68:32:E9:D7:3D:91:38:74
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019849D345572265B3C8D2222B3C8EAFB6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0C8E
Signing time: Sun 27 Jul 2025 03:00:39 +0000
Manifest this update: Sun 27 Jul 2025 03:00:39 +0000
Manifest next update: Mon 28 Jul 2025 03:00:39 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: O4D4mWCXvWekgt7qs1SgqNkPsxZb5vjbCCgOUNv3HDk=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:45:57:22:65:b3:c8:d2:22:2b:3c:8e:af:b6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jul 27 03:00:39 2025 GMT
Not After : Jul 28 03:00:39 2025 GMT
Subject: CN=7504c2f0e0cc2a3c85da50926832e9d73d913874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:5d:13:fb:59:e0:77:c6:26:2e:83:70:d0:
dc:13:ec:16:df:5b:06:3d:c1:93:53:48:22:64:c3:
ae:28:74:46:90:ee:40:00:af:6f:de:ce:18:23:ae:
73:7e:b2:ee:f4:e7:6c:00:11:83:46:6e:e4:9a:81:
51:70:f1:a0:55:c5:7e:1b:24:6b:15:16:24:21:d0:
6a:82:38:10:ed:f2:1e:c5:f8:0d:32:b1:37:71:4b:
6a:02:79:f9:4b:b8:a6:ae:2c:c9:dd:99:20:97:b3:
80:bd:ac:f9:4e:03:28:53:c5:03:fd:38:b8:87:35:
9d:9c:33:91:e1:71:34:9f:64:f0:77:04:1e:9d:c7:
76:38:14:f7:95:ef:1c:40:58:42:9a:4c:6f:88:5e:
af:0f:b3:fb:64:db:a9:00:d0:da:02:af:f9:a3:7f:
9d:f8:13:ac:51:e0:5f:fd:71:88:37:8a:bc:50:4d:
e0:f2:2d:98:76:cd:20:f5:44:4d:aa:a8:58:96:2b:
4a:4a:76:86:b4:86:21:50:58:36:8a:c4:07:e1:45:
73:d8:6b:e5:43:3b:7c:f7:7f:2f:97:1e:93:2d:6a:
7c:65:0e:cc:d2:7f:6f:15:28:ae:f3:29:ad:39:72:
6f:cf:7a:1c:84:5a:77:6e:e8:68:a5:19:98:75:69:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:C2:F0:E0:CC:2A:3C:85:DA:50:92:68:32:E9:D7:3D:91:38:74
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:71:37:cd:1e:14:d3:f2:f6:f8:57:39:41:c0:ca:1c:f1:a4:
b0:fe:01:3d:e9:59:ef:8e:1b:cd:18:f6:14:11:97:68:00:94:
28:5b:f8:c6:5f:be:26:14:7f:77:e0:69:ef:10:a8:5d:89:7b:
da:e4:ff:73:a3:02:1c:10:08:31:b7:1f:35:12:65:e6:64:fd:
4b:12:17:30:2d:c4:44:7a:d4:61:8b:29:87:32:42:9c:f3:7d:
db:66:29:1e:34:03:cb:64:38:ac:dd:3a:a6:18:bc:93:e7:48:
a0:b4:7b:d7:e2:75:0e:cc:2a:d8:d3:12:07:48:46:15:5b:fd:
d5:ed:ff:07:31:18:29:30:93:4d:c2:e2:de:f2:d7:02:29:81:
ff:3b:0a:5c:99:90:70:b9:68:08:41:63:08:81:c6:7d:e8:90:
46:fb:44:c3:00:7a:9e:b2:a2:30:95:ca:49:d4:1c:8d:e4:e6:
d8:eb:1b:cc:26:0b:da:f4:4c:29:06:7e:36:0b:00:cb:df:f0:
36:ee:45:9f:db:34:be:e8:1f:df:5e:8f:1a:5d:ce:fa:39:e7:
2f:42:b2:ce:55:20:5c:14:01:bd:31:d0:66:fa:a9:03:5f:64:
ff:03:63:04:c6:06:5c:d9:70:84:66:da:c5:3e:fb:a5:0b:2d:
52:c2:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:47 2025 by rpki-client