Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: JQbfuxryy4LLiIsJZPPdGss+Z0wUhf1QRTI5tDgGEMQ=
Subject key identifier: C8:B5:BE:F1:04:9E:8B:1E:04:2A:0E:35:DC:07:9E:97:7F:0A:43:05
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019849D374F7A4DFD34CC793B729B24C5719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0CF8
Signing time: Sun 27 Jul 2025 03:00:51 +0000
Manifest this update: Sun 27 Jul 2025 03:00:51 +0000
Manifest next update: Mon 28 Jul 2025 03:00:51 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: nXNI87dHrKWJT67E47lsz73XOBokSS/xhlQdJ65XC4o=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:74:f7:a4:df:d3:4c:c7:93:b7:29:b2:4c:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jul 27 03:00:51 2025 GMT
Not After : Jul 28 03:00:51 2025 GMT
Subject: CN=c8b5bef1049e8b1e042a0e35dc079e977f0a4305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:db:08:d5:d3:55:3a:16:94:da:d8:8b:d7:
da:fd:e7:b7:43:de:cf:33:ae:e3:ea:82:5c:a9:e6:
0c:b0:0d:91:ff:5a:3a:0d:87:e3:35:16:90:6f:d1:
93:26:ed:f5:a1:80:67:aa:b6:68:3f:95:10:05:67:
38:28:f8:c7:2d:08:3e:f2:38:18:78:e6:0e:36:77:
c1:98:57:a4:01:e0:cf:28:53:cf:62:5b:b3:88:67:
c1:b0:88:29:12:4a:a1:1a:18:9c:f8:f7:90:e7:65:
45:ad:27:90:97:25:6c:36:c3:e1:e0:38:dc:ed:cb:
46:c7:eb:a9:cc:34:c2:21:cc:3b:4b:5c:7c:b0:1b:
8e:8c:1a:6c:0f:50:f0:94:11:2a:3a:f6:9f:fd:8d:
77:38:3a:b3:39:4b:e5:a2:60:a7:5c:bf:bb:5c:ea:
d5:5e:9c:85:f0:78:8d:48:e3:32:4a:29:2a:4c:53:
02:ec:46:ee:43:16:70:ba:60:29:ae:ad:99:90:4c:
05:14:8b:4b:ef:a5:75:0e:d5:d3:4b:5a:63:2a:70:
bc:f0:a2:87:21:93:01:22:c9:83:0e:30:38:31:74:
e5:fd:6a:d9:10:74:4c:dc:e7:fd:a5:29:94:e8:1c:
65:67:b8:3a:97:9a:ff:51:ef:82:bd:c7:cc:f4:03:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B5:BE:F1:04:9E:8B:1E:04:2A:0E:35:DC:07:9E:97:7F:0A:43:05
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:d2:97:53:80:40:af:8e:38:78:90:a2:8e:88:91:5d:12:
d6:9f:eb:6c:1b:c9:f9:13:1e:31:69:b3:7b:35:ba:f1:5c:27:
a0:e7:94:06:ed:82:25:88:0a:c8:f1:3b:34:a3:12:5b:c7:68:
00:fa:ab:fb:ec:be:2a:68:bb:49:59:0e:2a:41:09:12:5a:56:
f7:07:4b:e2:f8:3c:42:a1:1c:dc:2a:7e:ec:b6:fb:3e:4d:cc:
b1:45:35:75:10:a3:f2:d4:d3:55:9f:1a:5d:8b:d4:b8:a4:fd:
20:d7:64:ed:01:5b:d2:e7:b9:48:f3:a1:fd:5a:c9:d8:01:20:
f1:6b:25:c4:db:29:33:01:c9:a1:03:d1:29:a4:ab:a3:a7:be:
9c:2f:99:dc:4f:e2:e1:9c:09:aa:69:30:57:df:45:42:42:bd:
8f:81:27:cd:73:f9:f1:4d:ec:5f:f1:1b:49:b7:77:25:27:33:
41:94:cd:cf:31:fc:7f:6a:36:39:8a:c1:a6:d6:d1:65:0e:db:
19:e8:cf:96:22:d0:ec:e0:a8:e9:8b:91:7f:df:50:34:7d:30:
ad:ff:4e:e4:75:99:73:6d:16:c8:c9:fb:e4:15:b8:f8:48:04:
0f:0c:6a:f6:bf:5e:98:b9:1e:32:e0:fd:d9:4b:77:32:ab:e7:
b6:38:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:10 2025 by rpki-client