Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File: 5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier: k0DVmLt7RH+l8IiUWoDAXsuOIge+gjGQCAe4GwgN0nk=
Subject key identifier: D9:C5:0C:95:3A:51:7A:58:35:3D:7E:2F:DC:1E:DA:79:C6:26:AE:09
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer: /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial: 0199221F165FD3FB63D63337DB7623C030E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number: 1B
Signing time: Sun 07 Sep 2025 03:01:26 +0000
Manifest this update: Sun 07 Sep 2025 03:01:26 +0000
Manifest next update: Mon 08 Sep 2025 03:01:26 +0000
Files and hashes: 1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: fDOEe4+64fESpHcYUAu1Rt8IlDlfEAgahB3ZELwaDbU=)
2: PrRGaFLPXBxBYOXraz8nx2Zv-Uo.roa (hash: d4brDjq0VND/Iy+6ZmnnMFSJxquKernTk88xGtm16DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:16:5f:d3:fb:63:d6:33:37:db:76:23:c0:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Validity
Not Before: Sep 7 03:01:26 2025 GMT
Not After : Sep 8 03:01:26 2025 GMT
Subject: CN=d9c50c953a517a58353d7e2fdc1eda79c626ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:14:15:da:90:4f:3c:b0:f8:b5:fc:49:d8:
f1:26:43:67:ab:9e:ac:ab:c3:b0:18:87:97:51:33:
28:d2:74:b8:6b:9d:11:5a:9e:59:89:3b:e4:91:1e:
d4:b8:35:82:f2:2f:7a:99:ac:e0:38:95:6c:95:94:
b1:dc:89:b9:f2:39:35:9a:d7:16:e4:0e:2a:f7:e5:
40:89:34:7d:b1:f8:96:4e:55:19:72:52:c7:c9:99:
75:63:00:b3:bb:9b:3d:a5:87:72:40:11:23:2e:6f:
d7:1b:03:4d:45:7a:c6:29:5a:a8:4f:d0:23:4f:94:
ff:03:b6:ed:79:94:7d:ab:b7:65:c2:ca:1d:a3:ac:
17:66:b4:07:4d:50:bd:05:17:5d:d2:3b:08:74:82:
e5:00:0f:92:cf:bd:5d:a8:1a:e3:32:ce:a4:10:fe:
42:cc:71:41:06:a3:22:4f:c6:0c:fa:60:95:90:db:
5e:ed:6b:66:33:e8:af:18:c6:c8:92:a2:e1:c7:44:
cb:59:3d:5a:b1:38:4f:cb:b3:fd:3c:03:c3:16:d5:
d4:21:39:f2:56:a8:d1:82:06:05:b5:94:4d:fc:c8:
97:25:66:20:bc:87:70:09:a1:80:09:97:f7:bd:3a:
68:d2:92:ad:96:74:05:4b:24:14:43:0c:67:e6:71:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C5:0C:95:3A:51:7A:58:35:3D:7E:2F:DC:1E:DA:79:C6:26:AE:09
X509v3 Authority Key Identifier:
keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:d3:3d:f2:d4:da:25:1e:1d:96:21:c0:ea:22:d1:38:24:
dc:d8:4d:ac:4f:e4:fe:9a:72:97:a9:0c:92:ff:54:6a:fb:26:
51:fa:c7:a1:5a:f7:31:47:a6:8f:6a:ad:ca:a4:03:16:7e:44:
c7:b8:42:f9:4f:a7:6f:35:b3:a1:3b:fa:2a:3a:08:16:a4:39:
5a:42:21:ef:35:60:20:ea:b6:6a:f4:e0:3d:ed:62:34:83:26:
cc:cf:48:55:68:51:e0:ff:54:07:c1:63:e4:10:6f:c4:d3:50:
e8:f8:53:5e:b5:af:7c:e9:db:72:cb:66:a0:29:df:0e:44:d8:
82:70:ff:ae:f4:33:a2:0a:23:17:81:c9:4e:e0:45:13:ea:27:
84:df:9f:2e:14:b4:7b:7f:89:85:1f:8f:7a:b1:59:8d:d0:34:
a6:2b:b4:fd:25:44:d6:a4:26:e4:4b:6b:1a:07:2b:0d:c2:c6:
af:9f:f8:05:dc:8a:0c:34:5c:3e:67:06:6a:ec:b9:0b:14:99:
ef:d4:77:1f:ce:9f:21:46:a3:bd:88:df:2e:c5:cb:cb:b5:5d:
a6:1c:2b:da:f2:68:11:3c:61:99:11:64:77:7a:72:b0:f3:97:
a7:1d:e9:f2:b7:56:f0:69:4d:c8:69:94:86:15:8f:29:01:f5:
83:c1:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client