Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: j6Do/GfnXjfqvuP0QA3JurQcuxePSUviwKi47f1kUbg=
Subject key identifier: F1:C9:00:A7:2A:6F:8F:6C:E4:07:97:AB:2E:E5:23:67:79:5D:F1:8C
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01991F1D473328E7AB5690DC87434D3CA80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: EA
Signing time: Sat 06 Sep 2025 13:00:36 +0000
Manifest this update: Sat 06 Sep 2025 13:00:36 +0000
Manifest next update: Sun 07 Sep 2025 13:00:36 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: v5hR7cDz+n/1UYmD+cBMjTtJaZ81qUuisjhC6LD81Qk=)
2: acXUcm42IS4pl31BFqGLL598V-g.roa (hash: tv2sOndhlPwn5kgKUF5qX+dekYD4mLLwcOPc7PK40dI=)
3: n3osC5rKdM6iHPZx6MqCr3JTQWc.roa (hash: suRQqEpXKgoazuJMwgkEGufz4KYSCm9sjlRmUwQJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:1d:47:33:28:e7:ab:56:90:dc:87:43:4d:3c:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Sep 6 13:00:36 2025 GMT
Not After : Sep 7 13:00:36 2025 GMT
Subject: CN=f1c900a72a6f8f6ce40797ab2ee52367795df18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:a9:40:af:5e:7e:73:de:43:c1:90:b2:bc:
97:f4:75:94:ba:80:dc:4f:d6:af:85:b6:b7:c0:09:
74:04:fa:01:9d:45:de:6e:40:3a:c2:5a:02:5a:c8:
e8:eb:b1:4f:c3:c1:c7:a9:69:8f:93:82:1f:0c:2b:
07:63:74:99:20:3f:1d:b9:2d:c9:c0:7e:4e:3d:65:
9f:ac:a9:e5:e0:6c:b8:3b:70:fe:42:a9:df:03:0d:
bf:dc:31:b3:ea:b4:d5:ee:5b:f4:b0:1a:b5:48:7f:
97:91:ea:ac:24:b4:0b:7a:4a:07:08:1e:95:00:84:
4f:96:00:f0:43:55:c2:8a:50:af:61:b6:d4:fc:a4:
e6:a0:f2:90:20:38:9e:d0:17:01:b4:3f:91:ef:5d:
9e:0c:0f:8b:b0:01:81:e8:29:05:40:44:3d:12:ad:
5f:4d:45:3e:c7:57:c0:03:51:2b:c0:d5:66:87:ee:
fe:96:af:de:c4:d6:16:6a:f5:f9:20:7e:53:d6:a1:
eb:5e:f1:06:22:6c:22:01:7c:f6:c5:36:84:67:52:
4b:d1:e0:d8:16:24:e3:75:66:36:ca:50:8d:68:89:
2f:75:7b:2a:78:16:a6:d2:56:8f:05:47:8b:19:98:
d3:77:75:f0:f2:5c:4b:c8:44:cb:b4:ba:85:4d:b1:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:00:A7:2A:6F:8F:6C:E4:07:97:AB:2E:E5:23:67:79:5D:F1:8C
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:18:56:54:77:23:37:af:25:15:94:f9:ab:f6:ef:6c:be:f3:
e9:c0:07:3a:7e:99:30:08:28:21:d1:7a:aa:07:49:77:12:a5:
fa:d7:da:9f:5e:e5:8e:94:0b:e4:b0:0c:0c:bd:fc:28:68:94:
e4:7d:a4:2c:55:70:0d:6f:7e:50:fd:45:11:c1:3e:6e:a9:14:
5c:4c:e4:f9:06:1a:c3:a8:4f:b0:c3:4d:78:d9:1f:24:42:9b:
c1:e9:5a:dc:ed:05:9d:87:e3:1a:83:02:fd:99:9f:00:99:25:
5c:89:16:20:c5:90:08:0a:c6:e2:0d:dc:3c:b6:a5:83:c0:c0:
ac:1a:e8:6a:55:f4:13:71:e0:4d:46:51:51:9e:b3:5b:f1:08:
9d:fe:5c:d0:8d:a9:a8:c2:82:50:36:61:eb:0d:63:a5:97:b2:
6c:a3:6b:4f:2b:a2:8d:f4:dc:5d:09:3f:6d:52:52:6f:68:fa:
e4:bb:fc:3f:71:82:d7:ca:f4:01:2a:d1:ca:a1:c5:a5:ba:ca:
aa:09:bd:3d:36:86:37:9d:c1:a2:88:46:1b:19:3b:33:5c:07:
7d:37:a8:25:9c:c5:51:b1:92:69:6e:e5:8b:bf:a5:b5:d6:6f:
06:d9:46:23:08:ba:68:6d:f3:6f:79:98:4a:4d:c1:e1:e8:17:
00:9b:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:59:04 2025 by rpki-client