Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: f9XL+hy4drv2ML5j3snNdaq6Aox15oplIHbSIuhT3pA=
Subject key identifier: AB:14:3A:42:E5:55:98:0A:90:6C:23:7D:75:61:77:6F:D8:E9:8C:10
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019853E8B88A7CC19A6DDCE158AD16AF1018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 12A3
Signing time: Tue 29 Jul 2025 02:00:17 +0000
Manifest this update: Tue 29 Jul 2025 02:00:17 +0000
Manifest next update: Wed 30 Jul 2025 02:00:17 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: fA8Wy1N0aIoKmx9V6fn5ox00Kzxa0K+9/2k2LmoKw48=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b8:8a:7c:c1:9a:6d:dc:e1:58:ad:16:af:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jul 29 02:00:17 2025 GMT
Not After : Jul 30 02:00:17 2025 GMT
Subject: CN=ab143a42e555980a906c237d7561776fd8e98c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:df:0b:28:13:00:16:82:a6:c9:b8:f2:80:
49:0e:4f:1d:03:f2:67:50:51:fc:82:63:db:fd:91:
0f:a0:e3:a2:4e:b7:a3:d2:07:a4:91:a0:f8:a2:e7:
06:97:ce:91:cd:d8:80:d1:24:53:69:9d:12:82:3f:
22:05:b3:97:df:dd:23:a9:a3:99:26:48:e5:26:0c:
bf:51:a3:a5:5d:b2:1c:8e:d7:4e:95:99:2e:eb:c5:
aa:37:5d:ec:0b:3c:87:55:5d:4a:9a:6b:19:f3:d8:
34:b9:a1:56:c9:20:58:3e:b3:ff:ac:52:6e:b8:ce:
77:8a:be:86:36:88:1b:73:64:ac:de:26:62:08:42:
c6:4d:61:79:1b:b2:55:0e:0c:a1:a6:e0:b1:06:25:
59:a3:1e:ce:c0:c5:83:3c:d3:a7:4d:f8:a8:b9:79:
67:45:07:87:1d:57:f2:5f:43:44:5d:91:02:9f:7c:
cd:1e:3c:41:39:cb:9f:05:e3:a8:1a:ca:e6:95:30:
a2:69:a7:13:76:04:75:b4:b3:8a:7d:c8:4f:b3:bd:
76:5a:c7:b8:97:83:1f:81:6c:a8:6b:81:fa:4f:be:
33:16:2f:cc:de:fa:51:81:91:8b:70:8a:fc:80:09:
e6:d2:43:91:a1:44:3d:09:35:5a:ff:cb:2a:96:75:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:14:3A:42:E5:55:98:0A:90:6C:23:7D:75:61:77:6F:D8:E9:8C:10
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:35:a8:be:1d:bb:2e:54:e1:2c:68:b7:7e:9d:97:31:58:
4f:e8:7a:8b:52:e5:91:c9:92:16:a3:c4:f4:48:31:bd:8c:47:
6a:1b:51:1c:30:59:61:36:c3:16:11:e5:98:6b:2d:7a:18:63:
15:c3:c3:21:a4:9f:ec:ac:52:1b:3a:26:f6:84:7a:d7:ba:4b:
9a:0d:f7:ec:52:92:71:65:83:30:65:ce:bc:c1:93:c1:1b:00:
88:38:01:32:04:10:86:50:e2:7b:38:42:90:44:e6:45:52:f1:
1e:24:c4:ed:af:dd:49:c8:04:83:d3:a8:ad:8d:bf:cc:a3:10:
46:0c:cb:db:54:c7:b3:77:be:14:f6:a8:ec:60:41:ef:f9:1a:
16:33:c8:3e:53:4a:00:90:e9:ca:aa:83:cf:a7:27:cf:79:df:
0d:0c:18:65:30:ec:cc:3e:a9:92:66:af:d3:32:75:51:10:c2:
dc:6b:b8:a9:0d:9a:8d:55:90:58:c7:58:e8:32:c2:c2:aa:01:
9b:a8:41:af:16:24:32:1c:a0:86:09:de:54:ca:6b:a3:c4:c9:
36:76:bc:dc:63:e4:6b:7b:07:b9:1f:7d:6f:60:ac:02:b2:9b:
6a:a6:de:7a:90:99:2e:b1:71:66:d3:96:39:1e:14:20:49:e8:
f6:1d:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:12 2025 by rpki-client