Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: cX0J9zuPvAMVc2mkAd43ssz9beqp4FjLRHpTAzCje9g=
Subject key identifier: B0:EA:58:07:50:13:D1:E8:12:E4:2B:4B:6A:E9:73:0D:A7:97:A0:1E
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0199345BF70315B4961C4E89709F317B008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0E49
Signing time: Wed 10 Sep 2025 16:01:06 +0000
Manifest this update: Wed 10 Sep 2025 16:01:06 +0000
Manifest next update: Thu 11 Sep 2025 16:01:06 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: sG8b0SRaOv6TGKfuSxGSRTqRNMOuBDxPPs8t7k+Po8I=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:f7:03:15:b4:96:1c:4e:89:70:9f:31:7b:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Sep 10 16:01:06 2025 GMT
Not After : Sep 11 16:01:06 2025 GMT
Subject: CN=b0ea58075013d1e812e42b4b6ae9730da797a01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:24:fe:6e:2f:0e:65:c7:3e:c8:0d:3c:24:
e4:1c:d6:8f:12:0d:04:7a:46:8b:f2:34:f0:25:22:
df:f4:97:5f:dc:6e:2c:8a:e3:00:ea:a6:e8:7a:c8:
dc:bf:42:a9:fb:f2:6a:29:e8:2f:55:e4:cb:89:c0:
aa:c8:c4:c5:dc:78:7b:0e:39:ea:40:6d:9f:40:c6:
42:e2:1c:ca:70:67:42:43:73:69:aa:05:95:bc:59:
ef:44:44:c3:53:a8:82:9d:4a:c8:f2:c3:0e:e3:ae:
18:8b:88:98:b2:5c:68:80:ae:db:52:56:99:a3:41:
51:32:14:a7:c3:ba:63:4a:7d:6c:50:e1:09:cb:4c:
9f:6b:c5:2c:ef:e5:13:41:a4:87:11:1a:fc:ea:65:
bc:88:4f:7f:75:83:e6:7d:dc:e7:0b:ee:ec:a3:ce:
51:dc:6b:f2:3f:82:7b:08:53:0e:97:a9:4e:a8:bc:
c1:9e:19:7a:27:38:94:81:58:d2:2c:fc:03:af:de:
66:9a:cf:3a:8a:64:78:66:7c:72:3b:52:d3:40:d4:
16:4e:16:0f:1a:68:cf:bf:1d:87:73:82:41:02:42:
51:de:0f:1d:f9:0f:c0:2e:0d:bb:e3:7a:4c:2d:40:
a9:a6:08:c7:c2:3e:6e:b7:1f:11:69:dc:29:c5:36:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:58:07:50:13:D1:E8:12:E4:2B:4B:6A:E9:73:0D:A7:97:A0:1E
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:f3:12:a1:cc:90:83:08:83:bc:7f:53:87:2a:87:0a:74:
c7:7f:03:51:69:33:3f:14:72:31:40:08:b6:0d:52:6e:91:88:
b2:79:1f:ac:34:e3:1c:e4:89:82:8e:01:20:db:f1:c9:54:86:
34:28:0d:c7:43:df:31:d2:62:4e:22:49:af:0b:0d:c7:ab:25:
20:d9:1e:38:b1:e4:40:f7:1c:a1:eb:99:2b:5c:c0:7a:e5:a2:
ce:3f:a2:f3:f8:2f:9a:d1:7b:ae:8d:c3:a2:93:f7:99:7c:35:
f5:2e:02:7f:1d:2d:52:a3:86:a9:8c:59:98:df:ac:ee:14:29:
17:ad:c7:44:cb:60:09:d3:57:f8:fe:b2:88:7d:48:98:1b:ee:
e6:62:f2:3a:4a:be:e0:ae:76:81:e4:ba:aa:36:00:7a:b1:33:
a4:4a:e0:b6:40:a7:a4:b0:99:65:17:29:e1:60:b0:f6:39:ca:
69:17:5f:f3:8d:4d:96:57:d3:9b:58:33:37:2f:69:ff:c4:ea:
04:00:8e:61:80:b1:39:31:af:44:b5:1c:2e:f4:bc:69:41:75:
32:1c:f6:e3:3b:0a:2f:3d:71:d3:66:3b:fd:8f:2f:fc:22:74:
6d:cc:ab:d9:f3:ae:62:dd:b7:20:19:1c:d2:f7:b7:60:8e:18:
c1:f5:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:29 2025 by rpki-client