Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: zj9XwESyRhl2r3JHzpz4g01IeT7eIqaiyl2931i3+Eg=
Subject key identifier: 67:49:7C:05:8C:AB:F5:94:FB:26:3A:55:E7:F5:31:54:2A:B9:77:59
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 0199239F04811E6CD244F70447D0B88D660B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 92
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: ugy1PJ0dozoIWRX7cd/eWxo/LMmwv3ucHjX+7iDH5z4=)
2: O55FnDiUhMsPTi6hjIewBuX7Ta8.roa (hash: 3JNSAI/aVMRICcZVLh9uXFKqAHc+rCKXfwm9TEvUz2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:04:81:1e:6c:d2:44:f7:04:47:d0:b8:8d:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=67497c058cabf594fb263a55e7f531542ab97759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ff:ad:cf:0d:da:88:27:8f:d5:40:c7:59:2c:
38:3d:5d:f3:7b:61:ea:76:72:98:3d:32:79:aa:72:
08:6f:aa:97:94:d8:75:5a:2c:fa:bb:f6:b4:46:d3:
8d:13:7d:29:fe:d1:cc:64:b1:73:80:a1:69:55:49:
73:7f:9e:95:f8:5b:4c:9c:62:f6:03:b7:a3:c4:79:
82:b0:57:0e:6b:b5:5c:de:bf:ef:5d:66:4a:4c:00:
e6:74:b8:57:87:a1:b2:07:82:2d:58:19:e1:f4:62:
4d:ec:3c:64:1d:d3:15:30:70:22:1e:fe:72:c7:26:
db:56:d5:a0:6b:b6:b1:41:4c:d0:10:41:c5:ba:a3:
9f:b4:1c:70:8d:4b:76:d6:d9:0d:eb:ed:68:af:a6:
c7:1c:73:11:a1:fa:9b:db:04:6d:4c:c6:75:f0:c0:
71:59:44:cd:b2:a1:e7:04:18:d9:1a:47:ca:f5:3f:
97:64:19:7d:b6:e2:23:d3:48:fa:14:2d:e6:0e:9d:
62:27:47:21:0e:62:f6:d6:72:1a:e1:43:51:55:9a:
b7:71:2d:c6:8e:f3:85:50:1f:0a:f1:a9:30:84:f1:
1a:e5:c5:e6:46:f5:9b:28:cf:8e:fe:91:37:f4:15:
0f:27:bc:8a:29:30:a2:5b:f5:8f:2a:0d:86:db:58:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:7C:05:8C:AB:F5:94:FB:26:3A:55:E7:F5:31:54:2A:B9:77:59
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0c:46:b2:ec:51:65:7a:b9:de:3e:a7:da:64:5c:ec:ce:76:
67:40:8a:40:47:5e:54:db:62:b6:e5:93:ff:75:f0:25:5e:e2:
8a:40:d9:3b:5a:c1:27:51:13:cc:b9:b3:26:26:74:ba:77:07:
d1:f3:d6:7f:9b:fd:70:e6:2a:41:ca:48:24:ba:b6:7c:1f:19:
f6:d8:e4:30:d6:b6:a8:57:a9:04:a0:fa:bf:18:0c:c4:e7:33:
80:26:30:d6:81:50:ad:f6:5c:8b:2c:b1:c1:7b:69:bd:a5:2e:
c4:97:b2:45:b4:c0:9f:56:07:fd:0a:ab:22:4b:f3:8b:83:bd:
b9:1c:aa:52:cc:6e:12:36:9c:68:1c:d4:d1:2c:24:ae:ca:4c:
a3:4e:d1:6a:9d:cb:ce:00:8a:d9:26:5f:11:14:b8:bf:d9:68:
a3:45:13:d1:13:b4:b3:66:ae:a6:42:81:73:11:46:37:1e:d4:
1a:a8:b7:a3:ef:83:f8:73:e0:fe:9d:60:d4:11:3f:be:d7:6b:
a3:f5:6e:93:1d:04:f9:c5:c4:0b:a3:16:90:de:5d:fa:4c:bd:
2b:6a:0a:2d:a6:21:5c:a0:7b:b0:59:55:9b:68:35:05:48:b0:
d1:20:08:36:d9:7c:31:e4:cb:0f:7b:2f:bd:26:1c:1a:21:b0:
48:a2:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:31 2025 by rpki-client