Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: 3UidVqbm3U6kC+lY1+BxRFJWJBud0BQ2O5f8olDN87Y=
Subject key identifier: 5D:CB:80:72:8C:B0:84:2F:E8:8E:C7:F1:2A:C6:07:80:A2:72:BC:39
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 0199161C6766E0EF859F88BB279BDB6E4993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0BAE
Signing time: Thu 04 Sep 2025 19:03:03 +0000
Manifest this update: Thu 04 Sep 2025 19:03:03 +0000
Manifest next update: Fri 05 Sep 2025 19:03:03 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: tILzO+tFJWZnCE2hQKJPDoX19eZEkIkP8KsIxVlLIw8=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1c:67:66:e0:ef:85:9f:88:bb:27:9b:db:6e:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Sep 4 19:03:03 2025 GMT
Not After : Sep 5 19:03:03 2025 GMT
Subject: CN=5dcb80728cb0842fe88ec7f12ac60780a272bc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6b:d8:29:10:6a:4d:7b:e9:f8:4c:b8:6e:d3:
a4:ab:71:bd:cb:c3:b6:2b:07:76:c7:bf:fc:4d:50:
5c:29:31:c5:61:33:0c:3d:91:ad:2e:fa:22:42:b4:
d7:63:f2:e8:92:ad:65:3f:01:4e:7d:3f:8f:34:6b:
9a:e8:e8:11:60:6f:67:c0:8a:a1:37:31:9a:e8:b1:
bd:49:4a:06:44:a1:f7:1a:58:e1:39:3c:78:c0:52:
59:75:7d:45:4c:4b:ff:11:c0:42:0a:30:3a:e9:b7:
8f:3f:06:f7:ca:30:81:47:86:03:c7:0d:44:1f:19:
6a:61:f9:03:b2:72:5d:be:07:d1:a1:0a:ba:0a:c1:
90:4c:1b:59:97:a3:f0:f0:11:db:04:fe:bd:18:74:
57:22:b5:a7:f0:07:c4:d0:69:1e:65:7e:66:0a:c2:
c9:b1:b6:3a:0d:89:76:93:b2:b9:00:1d:5d:76:b7:
d8:cd:30:c8:ca:a2:d4:22:12:76:8e:4e:aa:f4:30:
1b:05:43:37:43:4b:22:a3:a5:e4:c8:ce:cb:60:93:
ee:c5:1b:9a:9a:75:6d:41:c2:c1:22:21:68:c3:ac:
6f:bd:92:73:c5:4b:5e:f4:ed:b7:ad:96:8e:b7:6f:
7d:3a:4e:c7:ce:5e:1b:7a:52:59:4d:07:ff:50:cd:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:80:72:8C:B0:84:2F:E8:8E:C7:F1:2A:C6:07:80:A2:72:BC:39
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6b:04:2f:a1:a4:ad:02:60:9d:1a:b1:4a:69:5e:b5:89:b1:
69:65:64:fe:50:64:5a:fa:8c:b7:e6:aa:e8:70:a3:c3:2c:87:
95:82:ae:f8:16:9c:c7:de:1e:36:fb:e4:83:52:32:78:d7:c2:
8f:31:e9:38:d0:7d:bf:0a:ec:c5:10:53:89:d1:2a:b5:c8:0a:
1a:99:1f:8d:09:07:19:2c:9b:4b:28:02:de:5d:b8:6d:84:4e:
f5:e7:17:04:45:12:86:ee:40:3c:2e:9f:7b:ef:60:3f:3a:79:
2a:e5:88:87:d7:1e:16:f2:b2:7f:ea:45:9b:8f:69:d2:39:3b:
77:71:a8:53:d0:eb:f4:f4:6f:d2:3c:07:e2:05:65:e2:97:ed:
8f:23:58:3f:d8:88:2b:59:b2:81:eb:46:78:31:c8:9d:81:47:
35:e8:f0:27:14:15:99:f1:93:17:2d:21:74:9b:7d:be:99:4c:
2a:b5:0f:b0:2d:1f:59:35:40:17:4d:08:aa:62:56:76:75:5d:
09:c9:9c:8e:c3:01:9a:dd:7b:b2:0f:30:de:57:b1:94:c9:98:
cb:61:bb:c3:ef:ab:24:6b:51:dc:8e:1f:a2:b0:f0:ba:f9:b2:
d0:ba:44:f2:b3:52:cf:b6:36:fc:c6:88:21:38:8e:60:8e:bc:
d2:71:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client