Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: RING4x026B/E2x2Mig8b5Os311RLOzKqqtUHVG3KW8I=
Subject key identifier: 7C:FF:7A:6D:30:81:DF:A7:C1:F4:A2:BB:F4:B8:1E:33:0C:E6:D8:B4
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019849665AB6869B4D67E5CC9BB5590BAF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 0214
Signing time: Sun 27 Jul 2025 01:01:41 +0000
Manifest this update: Sun 27 Jul 2025 01:01:41 +0000
Manifest next update: Mon 28 Jul 2025 01:01:41 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: Ck83eCvBf+4/YQa2qjePCvNLlWHxWUIJWLeOQ0NcFTs=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:5a:b6:86:9b:4d:67:e5:cc:9b:b5:59:0b:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jul 27 01:01:41 2025 GMT
Not After : Jul 28 01:01:41 2025 GMT
Subject: CN=7cff7a6d3081dfa7c1f4a2bbf4b81e330ce6d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:11:c0:1a:63:8a:db:24:f3:f1:db:05:2b:
8d:da:e9:e0:57:70:74:83:5f:8d:de:fd:ce:48:87:
83:56:9f:45:ed:fa:c2:5a:31:9b:47:e1:cb:63:48:
bd:af:25:c4:d5:30:b8:29:ad:aa:0c:00:20:69:38:
5d:42:4c:a0:c5:e8:92:e8:a3:7f:3a:47:e7:e3:ad:
0a:75:01:2b:b2:70:14:cb:71:10:95:11:ee:e7:b5:
3f:bb:81:c8:32:51:1d:3b:db:aa:b3:6c:87:b0:3a:
f0:d1:b4:01:e2:32:71:37:21:ea:48:43:88:14:ce:
fd:e0:8a:7d:6b:5f:5a:92:f1:7a:bd:8f:e1:90:46:
eb:22:f7:44:f8:6f:bd:cc:7d:0a:d1:21:1e:0f:64:
53:ac:49:02:fa:9e:9c:37:a9:3b:0e:9e:e0:05:f9:
d0:48:22:9a:46:ab:6a:da:6a:bb:c4:a8:a9:ae:52:
bb:74:a3:df:b1:df:da:f5:ad:a0:1b:65:eb:6c:2b:
cf:5a:74:92:24:3a:74:72:81:26:6b:c0:4d:b8:27:
88:de:e0:98:19:b5:29:5a:59:1b:f1:3b:ee:ec:45:
79:e0:99:d4:91:b4:50:66:f4:ac:81:be:fe:57:db:
0f:e3:aa:5a:9e:62:fd:69:6c:c5:cb:41:d7:b1:18:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:7A:6D:30:81:DF:A7:C1:F4:A2:BB:F4:B8:1E:33:0C:E6:D8:B4
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8d:96:74:37:8e:48:af:01:40:2a:56:e8:82:ce:10:93:68:
ba:ac:97:4f:39:ff:86:76:4e:0d:c8:81:ad:29:9c:3a:4d:2d:
09:30:85:d3:23:f5:20:39:17:ba:3e:67:af:39:94:1b:f6:42:
98:12:ae:06:20:58:c4:88:f9:78:4f:05:c6:76:52:89:18:33:
2a:23:1c:fb:b7:2e:d9:9f:da:cd:b4:07:5e:3f:cc:1d:9f:61:
b6:eb:30:1c:cc:ae:bd:3b:cb:db:bd:a9:f1:b5:d9:8a:81:9c:
40:8a:87:6d:d8:d6:2c:bb:0b:b0:f4:92:11:3e:37:86:9c:63:
19:96:66:3a:b6:44:b7:c6:93:9d:ab:74:69:eb:a8:48:06:e4:
11:ef:5c:3c:24:d7:65:95:91:02:3c:84:4b:d6:84:5e:1a:91:
b5:a4:20:31:3e:e4:35:ed:0c:dc:69:49:22:77:c1:0e:33:3a:
4d:b0:5b:26:f5:70:96:ab:c5:fa:02:67:64:fc:9d:3c:d9:c3:
c3:25:8d:16:89:e4:05:ce:6c:99:ee:7b:c3:57:e6:79:83:ff:
ba:e5:42:3d:e0:51:9b:cf:6f:ee:98:38:87:b8:b7:6a:c5:c0:
f1:be:88:e7:9c:cf:90:3f:09:03:33:a2:de:6b:96:b2:88:46:
01:90:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:36 2025 by rpki-client