
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: FddovN+JGkqMo9JHzoaIMmdGhlDC8Tuf5ROziJDCrr8=
Subject key identifier: EB:9B:87:38:C3:15:EF:40:7B:0B:97:69:82:BB:C7:D4:FB:53:E0:6D
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 0199228CF81AD28A0C34D60F21AA798F38D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: 7sB0ymeStJuaK+3p58lRwCvWcPjoF9J5vuqSYjqeeaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f8:1a:d2:8a:0c:34:d6:0f:21:aa:79:8f:38:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=eb9b8738c315ef407b0b976982bbc7d4fb53e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:2d:3b:c1:d2:ce:e4:a1:7d:f3:7c:f9:07:
40:c0:43:00:de:c9:ff:46:d0:18:ec:28:d0:ae:93:
66:18:31:00:f5:c9:47:63:3c:b2:c2:37:6f:2a:46:
9a:b5:aa:f4:de:58:f1:ab:f9:a5:f2:02:a9:2f:ac:
bb:a4:b8:45:c4:02:0f:3f:ec:40:00:43:29:44:5c:
5a:5a:1c:dc:dc:92:37:88:1e:e7:5c:8a:f6:6f:eb:
f3:b9:67:32:cc:70:f9:ff:06:28:3d:84:e0:82:4a:
75:96:d9:d5:7d:19:eb:ad:5e:6d:1f:d2:40:53:7a:
47:85:71:c8:aa:4e:4c:53:41:a6:4e:bb:4c:f5:51:
8a:6c:c3:7d:b1:a0:c9:f7:55:e0:71:62:42:34:b0:
2f:bc:3a:09:37:9b:13:d2:6b:1c:7f:8c:c2:59:7b:
c3:ed:33:8a:e5:18:15:f8:58:c7:b5:04:ed:ed:bc:
2b:23:05:a6:f4:06:1a:c7:24:be:86:72:db:2b:8d:
4c:c3:b4:3d:c0:c7:87:ad:14:f0:ca:e0:68:dd:16:
cc:42:69:13:ef:25:67:85:f9:b4:3e:66:67:7c:42:
dc:cd:b1:38:a2:48:e8:04:c8:62:be:d8:a6:16:0f:
63:14:71:d2:53:a6:a6:e6:17:65:f3:d1:d9:da:7f:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:87:38:C3:15:EF:40:7B:0B:97:69:82:BB:C7:D4:FB:53:E0:6D
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:19:cb:92:10:a6:a1:80:32:1c:74:2c:2e:be:40:cb:67:4a:
34:e9:17:c0:d6:1e:0a:0c:71:36:31:3b:2b:74:fb:f1:5a:01:
6d:b6:3f:a6:ea:49:00:51:59:23:4b:db:e3:ba:9d:02:c9:7d:
83:48:b3:e6:2f:0c:5f:30:76:85:94:d7:15:7d:de:1b:73:68:
77:af:a4:34:55:6e:20:b9:ac:79:ba:e0:1d:fd:49:4e:0a:47:
f0:49:a1:43:eb:44:86:92:69:9d:a9:8f:9e:a9:d9:4f:6b:e3:
75:30:81:dd:4f:30:2e:cf:5f:65:3d:97:96:6e:20:25:3e:68:
ab:73:3f:3e:1d:65:94:f2:f1:77:ce:c3:5d:43:a8:a5:1e:7b:
18:14:41:49:9d:bf:04:f9:1c:11:54:d8:64:13:27:66:be:0b:
19:a3:0f:ec:19:b4:99:89:d1:14:cc:19:da:73:94:d0:55:af:
ef:5b:72:97:3f:90:60:93:22:2b:fb:7d:f9:9b:19:10:c7:d1:
5b:7e:d9:8a:93:2c:58:ff:66:7f:c2:9b:56:c4:ea:97:0a:0b:
06:18:a9:59:12:fa:8f:4f:bb:d5:28:6f:cd:15:9f:ff:02:1b:
51:d4:be:ca:85:82:0f:91:24:b3:b6:a8:b0:e1:78:04:9c:1d:
36:dc:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:44 2025 by rpki-client