Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: XLNyHuWRrGai5ZZu/74YVBLB0Nc3RrGsMHN86k9p9UQ=
Subject key identifier: C3:33:D3:A9:7E:D1:CE:3E:54:07:55:83:EC:FD:D4:F4:D8:14:F8:18
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 019847091DE954B0139BE92635ADA94534DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 0490
Signing time: Sat 26 Jul 2025 14:00:36 +0000
Manifest this update: Sat 26 Jul 2025 14:00:36 +0000
Manifest next update: Sun 27 Jul 2025 14:00:36 +0000
Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: mFIjZEfhrlHuboURR4R9298U4DQU3T8+WB8iLQaAveY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:1d:e9:54:b0:13:9b:e9:26:35:ad:a9:45:34:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Jul 26 14:00:36 2025 GMT
Not After : Jul 27 14:00:36 2025 GMT
Subject: CN=c333d3a97ed1ce3e54075583ecfdd4f4d814f818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:37:72:30:92:2e:65:4a:a2:bb:2c:5a:3e:
6e:8a:93:ae:c5:e0:1e:74:7e:9c:a9:f8:76:fc:42:
aa:c1:a9:32:b7:9e:c2:a6:54:00:dd:63:7b:3a:cc:
4f:06:a6:3d:04:3c:f7:d5:f5:13:82:a4:00:2c:50:
66:e7:82:c5:4e:3f:60:47:fc:69:6a:e1:79:29:e1:
13:b8:68:97:5b:f2:a2:79:5b:d9:97:c3:dc:ed:7a:
a3:32:3a:d2:38:de:4b:fc:20:89:4d:ae:a4:c1:b5:
8e:5a:92:66:c8:b7:79:ee:ff:1d:dd:9c:a1:3d:9c:
41:95:23:03:ce:f8:e2:c4:1b:5f:a2:8e:f0:b0:c6:
ee:7a:1c:6d:73:3d:54:3e:de:f8:5f:a3:ad:4a:97:
a7:7f:69:d3:4c:97:79:a5:a9:16:92:94:8d:e4:a2:
76:1c:62:43:94:6d:bc:84:a6:b3:5b:2b:aa:f2:12:
15:fd:07:c9:6f:39:26:d7:5c:a4:5f:8d:45:1c:b7:
21:8a:61:17:47:28:3a:dd:4c:f4:ef:42:b8:3e:e3:
42:57:8f:4d:6f:06:91:d6:9b:8b:83:ef:1c:dc:38:
58:01:71:2f:81:69:4c:0b:1f:d4:92:6f:ad:8e:73:
5e:3d:be:40:32:55:86:24:b6:95:c3:3f:99:60:9f:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:D3:A9:7E:D1:CE:3E:54:07:55:83:EC:FD:D4:F4:D8:14:F8:18
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:32:14:b3:9e:09:36:99:28:78:7b:a4:ec:43:de:ae:af:
04:67:7b:5c:41:de:57:19:46:f7:17:d2:bd:bb:36:b3:9a:29:
11:4a:2d:4f:a0:b9:89:9a:59:c3:93:77:d2:a4:ec:f5:6d:84:
a6:6b:71:98:17:83:98:a6:0c:e7:29:5d:27:4f:07:3f:bb:71:
9b:fc:59:56:96:b5:0e:63:60:b1:3b:99:87:41:b1:a7:2c:91:
4d:71:2e:99:28:bf:4a:8c:70:fd:84:43:5d:66:08:e6:f7:92:
42:7b:f0:7d:e2:5f:5a:cc:9e:20:ca:7b:91:03:e9:ed:31:c2:
1a:e1:10:2e:c2:af:68:a1:8c:ea:54:fa:d7:ad:ba:e1:87:18:
8e:55:57:ec:a7:a9:46:f9:ec:b5:1d:2d:d3:d4:58:db:e4:7f:
5c:e6:b3:8c:37:13:c4:1e:ee:87:7c:cf:00:fc:e8:d2:0e:bf:
a6:60:c9:ec:58:28:39:15:98:96:7b:f2:7d:97:86:94:91:4d:
d7:34:63:b3:4d:7f:9d:a9:a1:9c:1b:33:9f:57:b6:d3:ff:38:
6d:d2:62:86:f9:bb:ef:c6:40:e6:38:f5:77:53:f7:99:1f:0f:
bb:83:24:2c:09:ce:c5:4c:e8:d3:4e:64:38:76:7c:d2:a1:41:
0e:c1:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:02 2025 by rpki-client