Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: cqQNjC3tnn3R9iCwX5rOyY21JkIrLb7WoPRsL7+8Eg0=
Subject key identifier: E3:58:25:D5:C6:E3:69:0D:FE:16:C9:20:23:0C:09:96:DA:94:95:8B
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 0199228D266DE4A52863AA23F2282F46637B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 05F5
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: jzY0iFIZrCrKCwygFxtcoZ54ZzIDLijp4gKgKcofosI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:26:6d:e4:a5:28:63:aa:23:f2:28:2f:46:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=e35825d5c6e3690dfe16c920230c0996da94958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:7d:62:dd:82:4d:f3:b2:91:39:8b:85:be:
3d:2b:04:a5:12:73:e1:5d:02:71:f1:3d:8f:d7:b0:
0c:5e:44:69:77:62:03:86:d8:38:7f:4b:2a:98:c1:
a3:7a:b2:bf:24:8a:3c:d7:86:e7:15:84:75:c1:e5:
dd:dc:42:03:57:01:25:7e:73:96:a7:3d:11:60:53:
6a:89:3b:8a:44:e6:ff:79:0c:2e:4f:de:2d:5b:92:
65:cd:e6:11:ab:5f:dd:4b:0c:28:82:25:5a:79:e3:
5d:20:34:bd:13:46:9e:b9:c2:2f:25:ae:68:95:61:
20:e7:55:d8:05:13:5c:f8:6a:de:46:f5:09:42:c1:
d0:aa:7d:3c:da:d0:69:0c:07:49:3e:29:8c:0b:f4:
f1:50:b7:a5:e6:00:31:76:c4:2c:da:c2:c6:90:8d:
9b:96:e0:af:f1:e2:e8:9f:4b:ec:f5:ad:ac:23:6d:
5f:52:4c:28:e4:8e:1c:1e:dc:8b:3d:dd:de:92:16:
3a:c7:0f:99:b9:34:1b:1b:9e:69:e1:22:46:a8:d3:
6c:19:f8:fe:68:72:34:4d:91:ea:38:7e:e5:95:97:
fb:3a:7b:14:c3:59:52:54:9e:1f:94:4a:b3:bd:9a:
43:5c:20:e9:90:8b:94:18:2f:59:30:4b:68:d8:cd:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:25:D5:C6:E3:69:0D:FE:16:C9:20:23:0C:09:96:DA:94:95:8B
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c1:10:d9:08:9d:5d:23:09:36:62:2a:f2:65:0e:37:80:a1:
7c:43:3c:8a:2b:94:b2:f4:1d:44:14:26:87:38:cf:81:60:81:
f4:fe:5d:dd:0b:ad:2c:48:8f:7e:28:f9:35:c4:36:a3:26:83:
f6:b2:b5:2d:82:d5:cc:c0:61:09:c2:08:1a:b2:fc:8d:4b:68:
c6:e8:ed:32:e4:f7:4f:1b:cc:7e:3d:ce:36:5e:d7:7a:5e:dc:
49:d5:68:48:8d:8e:0c:01:de:60:47:8b:b9:29:29:84:d3:20:
9d:7b:d6:54:d4:90:a5:7f:28:d0:00:de:9a:2e:7f:57:3c:3c:
59:7e:08:b0:9a:c1:42:2c:eb:59:f6:bb:1d:00:d3:b1:0f:e3:
f4:a4:34:a7:64:1b:c0:0f:5f:34:29:88:fd:3d:87:cc:29:05:
da:6b:76:c0:7a:ce:cf:74:c2:de:75:ab:d9:ae:e6:02:ba:ae:
fa:b4:ec:46:a9:5e:11:03:3e:4b:5b:b6:1d:6e:a6:8b:c7:54:
55:f8:74:0f:28:ed:e5:31:d7:6f:ac:2f:86:29:ab:3f:5a:cf:
8e:f8:62:d6:21:bd:af:9a:aa:2f:27:31:65:0b:5d:16:35:c0:
85:e9:54:ce:e2:26:95:d1:80:f6:21:7a:ee:21:7e:03:a4:32:
4a:06:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:17:59 2025 by rpki-client