Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: sbLPlOX5eUoK61OIrs0xpvgd4636eHH2Yfkk96N4r9w=
Subject key identifier: 24:D1:48:37:55:3E:8C:CB:27:60:09:36:D6:68:76:15:D9:3C:8D:C5
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 0199233178597141B363AA7A16B190CA6F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 08:01:08 +0000
Manifest this update: Sun 07 Sep 2025 08:01:08 +0000
Manifest next update: Mon 08 Sep 2025 08:01:08 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: 6Dpz+7EO5Ggmj+c2pywV4awOE6RN1ixqgSQQ+bPglO8=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:78:59:71:41:b3:63:aa:7a:16:b1:90:ca:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Sep 7 08:01:08 2025 GMT
Not After : Sep 8 08:01:08 2025 GMT
Subject: CN=24d14837553e8ccb27600936d6687615d93c8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:35:9b:78:d0:14:10:0e:b4:24:57:2f:68:
d8:e0:d1:6c:bf:b0:bd:ed:02:75:a6:eb:f7:65:c2:
6f:dc:2a:85:40:ef:74:38:88:08:1b:bc:35:f4:c2:
b7:8c:23:25:e5:a4:50:8b:05:9d:c9:ae:0e:c8:b8:
4a:1b:91:eb:93:b4:4a:d0:89:ac:aa:67:ac:4b:6e:
a3:7e:10:2b:4a:df:32:b3:dd:4c:d1:4c:a9:9d:c9:
72:5b:65:62:7d:b6:b6:a9:41:a2:7a:e1:6d:1b:dd:
7d:97:f2:b6:97:73:9c:a9:18:9b:34:5e:ad:fe:47:
9d:3b:98:14:ad:5c:bc:20:aa:80:89:1e:77:8a:fd:
d0:41:0e:0f:4f:60:08:d4:5b:ba:1d:af:a7:2f:03:
19:9f:81:06:d2:1b:2f:3d:cc:92:4c:51:0c:ec:df:
ea:ec:ab:c3:ce:7f:25:7c:08:ae:90:79:01:ed:31:
d4:11:79:2d:66:75:9d:67:49:51:72:dc:16:4a:50:
4b:7a:ed:d5:98:40:c6:9f:03:bd:29:7d:50:63:8b:
2c:90:72:6d:2c:fe:3c:bc:81:f2:08:34:e2:75:f0:
84:67:94:9c:0d:27:91:67:bb:19:52:01:bc:ab:05:
66:3e:73:f1:ea:3c:fb:31:7f:7e:e5:bd:b1:92:31:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:48:37:55:3E:8C:CB:27:60:09:36:D6:68:76:15:D9:3C:8D:C5
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fb:dd:70:6a:a8:14:0d:f8:ea:82:fe:b3:5e:e1:e3:cb:0b:
fa:6b:2b:ab:0d:f5:dc:b2:25:cc:0b:9d:dd:ad:3a:c1:4c:30:
27:ae:30:00:75:ee:b3:ac:3b:e0:e9:55:bd:0f:4c:41:f8:9a:
92:7f:7f:e1:4f:47:06:2c:14:ab:01:bc:14:6e:2b:5b:49:51:
4f:71:66:18:2a:8c:f5:cf:f5:06:d1:d9:1a:21:5f:1f:de:13:
d1:8e:95:26:39:39:72:e8:bc:8a:14:44:71:bb:18:fe:9f:30:
66:6d:ae:e6:ae:ba:50:f6:28:ec:be:54:ef:96:63:d2:14:12:
95:75:13:de:34:dc:80:38:42:21:02:7d:6d:8d:d7:3c:27:1f:
17:05:77:e8:02:4f:fd:4e:ea:3f:bf:ed:ca:e1:d3:75:82:fa:
e3:9f:29:33:1e:d8:9d:50:da:c1:c7:eb:34:c3:9e:8c:44:f5:
66:9d:90:37:ce:c2:b2:47:d0:d1:a8:d2:03:4f:96:d4:56:fd:
57:76:3e:cf:38:b4:48:28:31:ed:ac:73:2e:a5:9a:6f:7d:2e:
38:c4:34:b6:d8:f4:92:d1:33:88:3a:26:43:14:34:46:5a:b5:
d0:f7:50:69:7a:cd:3b:55:87:e6:28:8e:d3:d3:84:b1:83:c1:
28:b8:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:17 2025 by rpki-client