Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: nnoMkrGsQiDubKMeJOhHa4BCbD78elWLCUVYwXHyaII=
Subject key identifier: 75:2E:CA:A2:6E:47:84:8A:AC:10:76:D5:A6:FE:16:B6:66:64:39:8D
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019935DCD9FF1CCA6F22D28AEE54496A739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 23:01:30 +0000
Manifest this update: Wed 10 Sep 2025 23:01:30 +0000
Manifest next update: Thu 11 Sep 2025 23:01:30 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: 7joFV9l4DwNqmyJkHuJarG3g7EUVOFLvk7V/TcbuMQs=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:d9:ff:1c:ca:6f:22:d2:8a:ee:54:49:6a:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Sep 10 23:01:30 2025 GMT
Not After : Sep 11 23:01:30 2025 GMT
Subject: CN=752ecaa26e47848aac1076d5a6fe16b66664398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e7:39:e7:53:91:8d:d1:6a:cf:01:c1:06:
79:3b:d3:22:18:6a:4a:d3:6a:82:43:83:21:4a:a9:
59:7c:d0:ac:64:fd:b1:af:e5:9c:cc:7b:8a:43:b4:
13:26:b5:40:51:66:bc:40:bb:c3:1e:a7:db:bc:3f:
42:2b:f2:48:af:a7:06:ef:9f:a5:80:ea:3c:c9:1a:
e5:af:78:5e:59:4b:c7:28:dd:60:cc:59:05:1b:e3:
37:07:b9:46:93:20:e9:ad:05:35:37:b0:30:c4:35:
30:ce:71:15:b4:de:87:af:82:61:0a:1f:cb:f6:57:
0b:9b:48:df:49:d3:46:bd:c0:c7:99:a3:c4:20:77:
de:03:89:06:2e:56:78:cf:e7:97:7b:2d:f1:28:f1:
a6:54:17:b3:71:8c:24:ad:74:4b:96:6b:2d:bb:80:
d3:cc:3e:0f:f6:a9:1e:01:81:9c:19:b2:4b:68:f9:
4d:55:cf:1c:f0:8b:8d:d0:7f:b1:68:9a:8b:9d:8e:
c3:15:a9:13:d8:e2:ca:85:34:38:a9:05:51:d2:3e:
3e:f0:f9:d1:8a:81:b2:6b:f2:33:0f:36:cf:39:c0:
8f:13:d5:10:73:12:df:73:65:da:fb:51:c8:2f:a6:
1b:d1:2d:55:65:15:47:ab:01:37:a9:c7:40:fe:df:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:CA:A2:6E:47:84:8A:AC:10:76:D5:A6:FE:16:B6:66:64:39:8D
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:30:91:2d:c3:3c:45:27:22:e2:28:d3:f1:26:95:c3:28:4d:
07:0a:6f:a8:7c:67:d1:84:f5:cd:9f:33:f3:5a:9d:d3:7b:cd:
10:6c:6f:f0:08:d5:03:57:e3:02:e4:3b:45:38:f5:6e:b5:de:
dc:56:a6:7d:19:a1:c3:cd:e7:c4:72:1d:93:88:6b:4c:e6:46:
c1:ec:ee:3d:04:3f:27:ac:e8:60:e0:c1:e3:28:12:d1:f3:a9:
c5:d8:43:14:bb:56:55:4e:1a:58:ce:fb:29:56:81:2c:21:2d:
cd:fd:ac:63:51:ad:55:cc:18:0d:10:6e:fa:1f:da:e5:2a:76:
15:31:64:74:19:f2:ca:6f:62:a8:e9:50:ba:9c:cc:e5:60:f7:
50:44:b9:92:44:92:06:7c:b6:0d:c6:e3:6f:fb:58:77:7b:b5:
5a:71:5d:6a:f8:03:0e:a4:47:aa:25:27:bd:c8:06:6b:c8:89:
b1:ae:03:36:32:6f:4c:78:cc:a0:1f:dc:a2:23:b2:10:ad:da:
3d:29:69:ca:da:f9:e8:ec:2c:13:57:cd:1b:f9:99:1e:f7:9d:
89:cb:5d:76:50:1d:56:31:67:4c:97:91:06:93:f4:19:23:1d:
0a:70:9b:44:47:2c:08:ce:e1:66:0c:9a:a3:23:24:8c:21:b4:
db:81:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:46:41 2025 by rpki-client