Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: 44WGAYYJ2JeyHsJoVN6zxhf9uCFvHbTwIZzNcy/hG94=
Subject key identifier: 40:28:D8:2E:09:D8:89:4D:C2:7C:4D:00:DF:8A:8C:76:60:03:6D:A0
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 0199221F0E413F72309F8E5218364B5D2268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 02E1
Signing time: Sun 07 Sep 2025 03:01:24 +0000
Manifest this update: Sun 07 Sep 2025 03:01:24 +0000
Manifest next update: Mon 08 Sep 2025 03:01:24 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: 5FX4GsIAPFyjojvKtNPdo2ZAuqGwV35NcdtdSN+UE18=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:0e:41:3f:72:30:9f:8e:52:18:36:4b:5d:22:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Sep 7 03:01:24 2025 GMT
Not After : Sep 8 03:01:24 2025 GMT
Subject: CN=4028d82e09d8894dc27c4d00df8a8c7660036da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:1e:45:df:5d:87:1d:b0:46:a2:66:5a:d5:
60:31:dd:09:78:b0:df:2a:e2:93:19:68:96:c4:89:
61:55:73:03:99:81:ea:f1:1d:12:79:04:5e:90:85:
32:0b:9f:70:d9:0b:41:3d:d8:7e:cf:ae:cb:83:04:
1d:ef:99:72:89:69:79:8f:28:5f:a5:24:2e:ae:59:
f8:7e:08:a4:de:37:ee:21:72:a6:af:3e:60:d7:b1:
2b:ec:db:d3:de:00:c2:ab:2d:68:91:db:6a:20:4d:
49:97:a5:ad:45:9e:63:05:af:6d:a5:97:72:da:8e:
28:df:1d:e8:74:02:f3:24:8e:20:2c:f3:09:3c:22:
9a:21:b0:0f:0c:b9:fa:ba:9f:4b:80:0d:6e:69:b7:
a9:d2:3d:f3:27:cb:2c:c7:03:a2:57:b9:f9:9d:88:
4f:53:d0:c1:00:e7:ca:ad:c3:ca:d0:1a:55:4f:03:
00:8b:73:c1:13:4d:e6:c0:a2:46:48:30:ee:68:09:
42:24:6e:26:94:52:52:ae:e6:b1:4c:cd:5f:2d:bb:
50:73:2c:fd:af:71:33:df:12:7a:6a:76:8e:33:c7:
49:ac:fe:cf:2f:87:f8:e8:2e:c2:d2:50:2c:0d:e3:
60:cd:4e:78:aa:1c:cc:ad:b3:d9:5a:5c:cc:a3:e4:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:D8:2E:09:D8:89:4D:C2:7C:4D:00:DF:8A:8C:76:60:03:6D:A0
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:27:81:26:b3:be:27:1f:9f:ff:d1:d5:df:7a:71:6c:dc:c1:
7b:af:74:7d:bc:b4:ec:60:74:82:eb:1b:1d:82:5e:f6:0e:de:
1d:03:97:63:69:a2:64:ba:92:3c:bb:72:b3:7a:01:ab:ab:a4:
45:e7:d8:68:83:5b:ec:c4:b3:79:dd:6c:50:e9:b4:ce:35:01:
81:4c:29:6e:7f:6a:d9:4a:d1:4e:fe:15:03:20:82:12:cf:75:
05:8c:56:d8:cc:42:43:05:7c:0c:0c:33:c0:b6:cd:85:31:93:
54:91:f3:d7:1c:df:35:3f:08:84:09:84:46:ba:28:07:34:2e:
dc:bf:e3:f1:c7:8b:c0:08:58:12:c1:0c:ca:33:59:86:24:fd:
3c:8c:71:e3:0c:0d:24:fc:ab:1e:c6:13:d4:6e:40:51:36:5a:
af:84:47:af:8d:3f:2c:89:e1:4d:98:c6:c4:75:16:b0:89:65:
3e:23:53:08:06:dc:6e:b9:d1:49:73:74:1e:9a:b1:16:2b:62:
b3:73:71:8c:01:d4:a2:48:7b:72:93:93:92:12:0e:78:ab:48:
d8:8d:f5:b2:f5:a3:41:49:68:69:83:8d:18:79:8f:da:e6:f1:
0e:be:06:73:a4:79:b4:0d:e7:2e:87:6d:be:6e:67:67:8a:33:
a4:70:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client