Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: qOcoBXKVziMRYXstgC3TMo4wr8yxewtouoL9iqEIKEA=
Subject key identifier: 76:B8:9C:CF:77:C3:84:50:59:57:80:77:A9:10:94:10:EE:58:6A:7F
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019827EC3D3D78D04E86CF59E7012296FB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 137E
Signing time: Sun 20 Jul 2025 13:00:50 +0000
Manifest this update: Sun 20 Jul 2025 13:00:50 +0000
Manifest next update: Mon 21 Jul 2025 13:00:50 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: eulWiE+fsG5ahVT+T9fO5LIGGCX2xt9QGUzGpPPT0bM=)
2: VzSRXIJg549082TDLwuDhpZSHdM.roa (hash: A7LBmXbBqDdzugUEkji9OFm2eXNsHo+v5p497CjSCCA=)
3: gHDsE-M7Bds6BODdronU54n9Gb0.roa (hash: wZSAuVITgB+tf10qxZ+G6OSnVz70iDg6RypnL81jrkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:3d:3d:78:d0:4e:86:cf:59:e7:01:22:96:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jul 20 13:00:50 2025 GMT
Not After : Jul 21 13:00:50 2025 GMT
Subject: CN=76b89ccf77c3845059578077a9109410ee586a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:ab:76:e9:8f:d1:07:79:3d:41:10:3b:13:
3c:45:2b:d5:86:da:c1:36:81:59:7f:f0:43:3f:46:
74:f8:68:cf:61:7f:45:8d:c2:5b:41:12:0a:73:ce:
d6:d5:d8:f5:e3:af:94:b1:e1:92:f6:3a:2b:5d:ec:
f2:78:76:a4:5d:a1:95:84:50:d9:08:4a:29:e0:6e:
37:f1:03:ce:dc:7e:51:70:ff:fb:98:58:9d:5e:a7:
4b:d4:8b:e1:c2:05:6f:46:55:9a:fd:9d:c9:50:b9:
c0:78:77:46:c1:f2:c2:37:94:91:1a:88:ff:cd:54:
b5:6a:a6:56:1f:6d:67:b8:b8:83:21:75:90:05:de:
98:65:c1:61:fc:19:a1:0d:e5:1e:fd:8c:ab:59:b3:
f4:29:13:d7:9b:d6:a8:8e:88:3b:ab:05:03:4c:94:
d1:39:f7:fd:3c:1e:ff:0a:ff:3a:cc:df:b5:13:7d:
4e:0b:a9:b9:e9:54:2d:95:85:99:a4:07:84:2d:1f:
7f:ab:dc:5b:a0:71:48:be:31:dc:be:01:01:37:70:
5b:1c:b6:10:93:ab:f8:52:e8:9b:e8:59:d8:78:fa:
3a:70:14:d8:6d:00:95:96:09:86:dc:78:bd:3a:f5:
2c:07:46:d8:b3:c0:2c:ea:ee:1c:72:74:ec:f5:f1:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:9C:CF:77:C3:84:50:59:57:80:77:A9:10:94:10:EE:58:6A:7F
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:84:54:9f:5c:43:27:81:8d:7f:06:ca:da:9b:8d:ba:12:bd:
32:df:cb:c8:16:2b:86:e3:bb:c6:38:3b:a3:6c:a4:87:b4:1c:
11:9e:db:fe:23:fc:4d:32:5c:e6:de:83:d6:4f:93:f5:2b:07:
20:01:b0:b8:74:61:e4:13:1b:95:d2:d8:13:d2:00:ce:f9:c5:
e4:68:12:fb:76:41:b9:54:fa:b1:66:4f:0f:8b:ef:0f:eb:65:
b2:b1:fa:b9:65:bb:ae:53:98:0a:e8:ff:60:e5:04:a6:e4:0e:
8f:74:f1:a4:08:c1:de:d0:59:75:0e:7f:f5:70:90:d4:53:3e:
64:46:ba:c0:74:39:dd:1c:14:0f:e6:e0:3b:89:32:a4:3c:0d:
47:2c:8f:47:0b:47:63:bf:c3:7d:55:2f:72:72:a9:71:84:65:
07:fe:e6:9e:ab:3d:cc:9a:56:ae:7a:f8:3e:a0:bd:4d:0d:18:
e8:c8:12:26:c3:14:97:19:92:cd:91:51:45:9d:55:70:92:7e:
d7:7b:76:86:d5:57:d9:03:15:38:07:6b:ea:21:17:1b:a9:34:
08:81:31:73:76:c2:08:7c:0f:3b:27:78:78:dd:29:0c:c8:5d:
71:2d:a3:4c:8f:05:82:6d:5d:ea:f0:23:13:4c:2a:ce:07:e1:
74:85:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:31 2025 by rpki-client