Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: 0TZ4qoAAwuw5sL0MR4lbozG0xNEhNIn0h9mPhazPfzM=
Subject key identifier: F9:B5:B6:80:46:2B:08:4D:B3:9C:64:20:B9:4E:4B:62:D6:55:AC:EB
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019848F77AA6E9F94EEDF17C4551123E7DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:34 +0000
Manifest this update: Sat 26 Jul 2025 23:00:34 +0000
Manifest next update: Sun 27 Jul 2025 23:00:34 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: spMjNCWcUu6iI8bN5LrwC2qqX1/n7gROrKWBD6vOzjc=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7a:a6:e9:f9:4e:ed:f1:7c:45:51:12:3e:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Jul 26 23:00:34 2025 GMT
Not After : Jul 27 23:00:34 2025 GMT
Subject: CN=f9b5b680462b084db39c6420b94e4b62d655aceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:63:b9:92:05:16:42:1a:73:66:a1:49:61:
c2:a4:5a:ae:7a:2c:f7:67:2a:b1:e8:cd:c6:ba:f6:
95:cd:b6:c3:74:8c:b8:8e:ae:11:a5:a1:a1:fe:81:
17:d7:4a:2f:dd:a8:33:f6:fd:11:eb:03:ac:21:fe:
e7:f2:fe:36:8a:0d:0d:70:21:a9:00:d6:f2:38:ba:
b1:7d:0b:70:3c:68:d4:26:1c:69:3d:11:17:32:79:
a1:a3:42:70:c4:df:4e:b5:1a:e0:38:65:e6:ac:87:
8f:c5:31:67:6f:39:b3:86:57:30:ef:71:4e:15:7a:
74:24:aa:80:ec:e2:a5:cb:8f:70:11:eb:df:ce:c6:
db:90:07:8d:7d:04:6b:b5:e5:bc:74:5c:e9:c8:00:
3e:5f:c0:4b:b9:73:34:ab:9a:23:03:ae:23:4c:f2:
84:85:c3:c4:0a:cd:30:43:e6:ec:71:66:e6:1f:70:
87:1b:6f:ff:ec:54:38:e0:aa:7a:29:27:f6:cb:a0:
ff:1a:32:97:dc:a0:83:a3:1c:b9:c1:f9:fa:38:1b:
ec:a5:26:fb:92:75:ac:5d:aa:c4:34:5d:97:27:74:
9f:55:13:d2:05:a3:28:a7:7c:2e:ff:b5:09:9c:81:
ae:d7:7d:d2:57:41:14:b7:48:be:72:61:59:41:61:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:B6:80:46:2B:08:4D:B3:9C:64:20:B9:4E:4B:62:D6:55:AC:EB
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:4d:ec:5e:0a:8a:b6:07:26:1a:26:25:a3:50:a1:38:68:
b9:64:0d:01:7e:a0:65:64:aa:21:6c:be:fa:c9:3a:1e:59:09:
a4:2a:56:e6:47:b7:8b:8f:f4:f0:18:de:f9:dc:28:72:51:c1:
cd:46:65:68:6a:fc:54:85:84:70:9e:8e:78:f9:f5:23:ce:ee:
dc:69:bd:c3:17:e6:01:da:3e:1d:15:ff:68:78:de:2b:c2:96:
04:20:b3:ea:5d:c3:a0:ae:bc:77:8c:e1:76:23:fb:77:5e:fb:
1b:f7:6e:0e:be:af:fa:2e:0b:d6:d2:ca:a4:ff:74:97:e0:26:
27:b1:01:92:39:1c:6f:e5:0b:a1:82:e9:22:04:66:49:4f:58:
1d:05:e8:e8:d7:8d:21:c2:92:54:3a:ef:32:28:94:54:9f:44:
06:01:d1:a4:bd:c2:ba:8f:7d:9b:3b:57:a9:50:ef:22:c9:7f:
3c:ad:db:4c:4a:ef:44:52:14:71:f8:64:54:77:c5:47:92:35:
08:03:63:d9:1a:f2:b0:ee:01:7d:56:59:e0:26:d4:b2:34:8f:
5f:da:de:61:cd:b7:cb:72:2c:18:0c:66:d4:cc:af:59:37:26:
0c:55:3d:90:6b:cf:41:bc:f5:08:a3:31:23:18:2f:55:7a:57:
be:09:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:15 2025 by rpki-client