Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: J34Ubi7wfYmvXjA1ixSoWDMG4JiZxea11afMtZLOiGI=
Subject key identifier: A7:A2:31:FA:1A:0C:DE:DB:02:79:BB:93:9F:AB:B0:89:81:C1:66:65
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0199239F87AD4DB7DF4745DD7C12886E9D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:21 +0000
Manifest this update: Sun 07 Sep 2025 10:01:21 +0000
Manifest next update: Mon 08 Sep 2025 10:01:21 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: Jvm1RZG7rxx+BaD3oL8y9S9JpwP69seQ3eJy8bpSC8E=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:87:ad:4d:b7:df:47:45:dd:7c:12:88:6e:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Sep 7 10:01:21 2025 GMT
Not After : Sep 8 10:01:21 2025 GMT
Subject: CN=a7a231fa1a0cdedb0279bb939fabb08981c16665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:ee:20:95:bf:64:26:45:f5:e2:48:02:73:
1f:ee:6a:5a:94:78:d3:88:88:d1:41:85:5d:36:b2:
95:b3:22:70:c3:8e:a3:2d:4c:57:b4:dd:ea:eb:7e:
ee:3c:7b:b6:f6:38:dd:ad:67:be:b8:1c:ee:e4:b3:
57:b1:08:87:81:6d:15:f0:2a:fc:79:de:47:88:64:
11:dd:ce:24:f3:86:2a:a0:c3:81:50:23:ec:79:8d:
72:00:de:e1:73:3f:02:a7:a4:84:e6:6b:58:2a:64:
87:88:39:f4:2b:73:ed:51:c6:0e:89:27:cf:f1:1d:
03:67:35:23:57:b5:5b:31:a3:33:1e:e8:68:1e:ac:
e4:a7:31:e5:d9:32:01:b7:9b:a1:75:72:b8:9d:65:
00:96:14:1b:9b:cc:2a:4f:ea:eb:f8:8e:f3:12:5d:
83:27:bb:f2:a0:bc:a6:f8:4e:1f:f5:fa:48:6b:61:
7b:89:59:25:05:53:25:df:67:37:66:bb:cf:aa:37:
52:71:bd:7d:e5:ba:f9:ac:59:f8:55:b3:8f:fe:ba:
22:ba:9d:8b:e3:35:c3:54:08:4b:bc:81:83:93:75:
91:36:ea:ae:27:20:3f:d8:71:c3:23:e4:ff:73:bf:
f7:db:de:b2:d0:82:f1:36:cb:39:d6:db:cd:f5:3d:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:31:FA:1A:0C:DE:DB:02:79:BB:93:9F:AB:B0:89:81:C1:66:65
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:86:81:27:94:56:99:8d:61:fd:00:04:96:b2:7d:d7:e5:
80:8b:5e:82:2f:49:30:fc:7c:6c:fd:5d:4d:f1:6d:0a:7a:9b:
85:0e:af:31:da:77:f2:ba:da:d7:a4:53:40:cb:c4:03:50:32:
d0:10:4c:e6:03:75:fa:03:83:4e:2e:05:6a:c5:8f:c4:46:e5:
d6:e9:3a:e8:be:1b:46:26:10:72:f6:83:58:a7:fa:d0:3c:17:
34:4b:0f:c3:c6:f5:6c:8b:ce:6f:bb:1d:df:90:09:84:03:34:
1d:f9:0c:b1:49:98:4d:8c:e2:8f:34:e7:db:f5:94:95:08:ac:
be:88:dd:56:26:56:29:52:3b:15:d0:f1:0a:46:1f:b2:8e:93:
7c:32:8d:38:cb:1f:26:3c:90:2d:82:e4:85:21:db:15:19:e8:
fe:0d:9c:e2:03:63:55:d1:29:ee:3c:29:a4:51:76:cb:22:eb:
d3:fc:73:92:74:a5:1f:c2:05:ac:28:fd:b8:33:85:d2:32:7a:
a5:22:33:32:bf:e5:9c:7e:d5:38:d7:19:78:c4:3d:be:83:65:
2d:88:8b:a2:a9:a8:9b:75:26:86:3e:bc:a7:92:e9:19:3d:32:
80:98:6c:48:a2:0e:12:8c:6a:d8:40:79:b7:35:57:d9:d3:71:
e1:bb:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:35 2025 by rpki-client