Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: UB52UOHtK5sfWlGj8ZLgPEKupupRflR6YNQQ0UPOqjc=
Subject key identifier: 94:D7:10:83:F6:53:1B:7F:D5:F7:22:6F:B6:E1:BA:C0:B6:48:CF:83
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0198458986B33F90DE562E3AF5D6312D8CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 10E0
Signing time: Sat 26 Jul 2025 07:01:37 +0000
Manifest this update: Sat 26 Jul 2025 07:01:37 +0000
Manifest next update: Sun 27 Jul 2025 07:01:37 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: lDlktUmhGo7UZ9SW1YJvW2jbxQSd2idvgSiMI1kwM0E=)
2: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
3: d9EHF0cDaJcn3746j8KfKL2Zqv4.roa (hash: pKGwqLxpRbKLmbEwO5SCI6mwZ/Q5ftoBq8dpQrgnuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:86:b3:3f:90:de:56:2e:3a:f5:d6:31:2d:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jul 26 07:01:37 2025 GMT
Not After : Jul 27 07:01:37 2025 GMT
Subject: CN=94d71083f6531b7fd5f7226fb6e1bac0b648cf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:b7:c2:72:cd:c1:5c:66:10:d4:47:8e:3f:
b4:c3:6e:e3:f2:dd:7a:d8:61:91:e8:24:ac:6f:c3:
93:af:86:45:c4:eb:9b:4f:e6:fc:1f:ee:6d:16:2d:
a0:df:e2:b2:59:94:19:df:84:ec:ff:81:9b:e9:27:
03:2e:ba:45:29:7d:b4:6d:a2:58:66:b2:25:96:a4:
18:dc:56:c7:33:72:64:cb:1f:3e:56:37:86:3f:81:
88:72:22:99:61:0a:57:d8:7f:8f:9b:b8:f0:ae:94:
83:e8:36:29:aa:91:8b:4a:73:e7:df:67:f7:81:50:
40:e4:00:da:d5:76:b1:2c:64:a9:b1:69:48:f3:e4:
bf:8a:bf:af:e2:e1:81:56:ea:33:53:38:eb:07:01:
eb:63:83:48:f3:8b:94:f7:00:2b:e5:39:16:f9:40:
bc:f0:a0:c6:69:4c:75:5c:af:b3:1b:23:e7:67:5a:
72:a8:b9:6d:0e:6e:04:f9:68:02:17:2c:00:71:c6:
11:9f:4a:6a:f6:55:5b:9f:75:2c:53:07:99:2e:01:
e7:05:90:da:73:17:f8:eb:66:09:c3:49:3d:63:7d:
9e:5c:9b:c0:d0:3d:89:32:fd:37:56:c4:9c:50:8c:
28:d0:02:65:3b:5d:17:af:84:ae:12:05:20:9c:d7:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:10:83:F6:53:1B:7F:D5:F7:22:6F:B6:E1:BA:C0:B6:48:CF:83
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:80:b0:99:72:34:ff:f2:39:e6:1d:38:9d:eb:2f:c8:18:a6:
9c:7c:32:24:52:1f:f8:8b:19:48:73:bf:aa:7e:f5:ff:41:0f:
d7:88:ac:cf:97:b7:9e:cb:96:f9:5a:64:e4:1d:b5:ae:8d:4b:
88:00:72:6f:64:65:0e:51:9d:3f:ed:ea:2a:11:b8:6b:6b:da:
73:8e:d3:3c:69:c6:a9:6a:e3:ce:c4:e6:c0:c2:23:98:9c:f2:
d7:3b:84:a8:e8:bc:28:b6:a7:c5:16:90:00:77:45:95:13:e4:
4c:e3:9b:25:ec:7f:30:8b:78:7f:ea:ad:67:f8:e9:e4:a0:4c:
e4:ed:82:e0:c7:85:24:bd:04:ff:93:63:20:74:29:7a:b3:f1:
b6:cf:e2:d2:fa:b0:5c:63:3a:ad:e0:a4:84:aa:c0:03:eb:85:
1e:8b:e1:08:4e:62:4e:f5:f2:0e:aa:a8:84:bc:ce:7e:eb:53:
dc:ec:62:a0:fc:bc:37:91:6e:7c:1e:94:89:54:bd:ae:17:99:
88:3f:6f:e8:8c:42:39:90:9b:37:cc:66:a2:1d:10:2d:12:1e:
d0:e7:b1:07:f1:e4:61:4e:9a:99:61:1c:2a:c6:e1:2d:53:ab:
d4:b2:a0:14:68:f4:db:e5:fa:77:f1:e5:c5:25:25:15:d2:77:
4c:f5:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:51:33 2025 by rpki-client