Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: J9hqn6xf2NIqMIbswfwRb7Iy2MoCJpt4DUV2DF5oYbs=
Subject key identifier: 1D:E4:1B:59:E3:C9:1B:33:B9:15:A0:DA:FE:73:1C:62:E9:10:A9:E7
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019923A08AE099A23720CBA2CA67D41789D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: kFVwZBFjgnVhOXbev49d+gqvT0ydZp6OPa+Vcm1Zn3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8a:e0:99:a2:37:20:cb:a2:ca:67:d4:17:89:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=1de41b59e3c91b33b915a0dafe731c62e910a9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:b0:52:6c:b6:48:e0:e8:2c:ef:aa:c1:02:
3a:80:70:7f:d7:f6:d1:b1:11:8c:f9:65:5d:d0:f3:
21:3d:33:b4:41:9a:61:a9:e0:f9:63:77:c9:d7:e9:
ce:6c:0a:b0:f4:9e:a1:7d:d3:33:be:c2:0e:ed:82:
25:8c:a6:7c:2c:2c:f3:f0:d1:e8:57:64:6f:56:0d:
e5:0c:7b:2d:ac:4b:7f:cf:15:64:e0:df:12:fe:de:
49:ad:c4:89:0b:09:bb:6d:0b:8d:44:ee:3f:29:49:
00:75:3e:2c:b5:47:a6:c1:05:1f:83:3b:42:52:ad:
b4:f8:91:70:e0:48:da:80:65:18:f9:ca:98:2c:2d:
f1:eb:4e:b8:92:e7:50:d9:3f:1d:35:c3:ab:5a:6c:
b9:d8:c7:2e:0d:fe:87:72:3f:82:56:67:10:df:ec:
5e:c0:82:0a:9d:8d:cf:e2:d5:5f:5f:8c:ff:01:46:
ef:63:8e:36:0e:90:4a:6a:49:e1:74:33:78:99:13:
df:c5:34:3b:8a:21:a0:a3:f6:74:07:4e:0e:ab:ab:
5b:92:b5:42:b9:1e:f0:9d:fc:7f:58:d3:a4:a3:9a:
06:22:e7:5c:d7:39:90:fb:e0:97:07:8f:2a:5f:66:
55:01:29:e9:c1:12:7c:37:75:60:e2:4d:0e:39:e6:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:1B:59:E3:C9:1B:33:B9:15:A0:DA:FE:73:1C:62:E9:10:A9:E7
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b3:1e:c0:4b:17:db:10:c8:11:55:9b:35:f2:3d:09:fa:35:
59:e4:94:f3:d0:7b:10:bd:48:d0:93:88:7c:5e:c3:f6:3b:6d:
ac:e2:f9:6f:a7:41:31:03:44:7c:d2:26:d2:60:23:f6:5d:4b:
16:04:71:53:ac:e8:83:cc:c0:bc:df:ec:f4:52:0e:09:46:a8:
88:cd:54:b6:dc:37:b7:e6:a1:9c:3c:3c:bf:5a:aa:38:90:00:
4c:38:03:ff:61:c2:d4:70:9d:c6:be:91:df:9a:66:f8:27:a3:
95:06:60:68:dc:ce:44:5e:7c:cd:6b:5a:11:c1:27:e6:64:b0:
6b:a9:02:fe:82:e8:73:75:3b:05:45:3f:26:29:d8:ba:01:74:
2d:2d:27:7a:f9:c3:62:86:eb:c2:a9:b1:ee:4b:79:e0:b5:3e:
30:40:99:87:94:59:98:3a:fd:41:53:18:98:a8:40:0f:d8:60:
19:13:e1:14:5e:43:39:b0:fc:16:d4:e5:75:f9:1b:31:1f:1c:
09:68:ab:5e:60:3a:8f:5f:e0:43:5f:01:b3:3f:d0:16:2a:ba:
c5:48:0e:6c:e2:9f:0d:9d:4b:40:b3:bd:af:b7:c3:8a:15:6a:
44:87:d0:79:fc:8d:aa:81:70:41:6a:0a:7a:d9:a3:a4:3a:1f:
fb:f8:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client