Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: bLGwVorvA0mclt1lj4kYwwRn9HNeZrzXTIrevLLpG44=
Subject key identifier: 0A:1B:33:23:52:B9:A0:A0:E0:C6:AE:56:2C:6C:20:E4:49:28:B5:84
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 0199228C61B23F9DF4609167207AC4EFE536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 045C
Signing time: Sun 07 Sep 2025 05:00:49 +0000
Manifest this update: Sun 07 Sep 2025 05:00:49 +0000
Manifest next update: Mon 08 Sep 2025 05:00:49 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: rqJaDzCT4e7jA4ur7YTRBV9wmr+IYDyvjSM9oS0Ui9c=)
2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:61:b2:3f:9d:f4:60:91:67:20:7a:c4:ef:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Sep 7 05:00:49 2025 GMT
Not After : Sep 8 05:00:49 2025 GMT
Subject: CN=0a1b332352b9a0a0e0c6ae562c6c20e44928b584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:f5:b7:27:ee:07:67:9a:8f:98:30:70:67:
3e:07:5c:8a:bc:cc:30:25:b3:ed:20:89:6c:7d:3e:
a7:20:c3:0e:1c:08:0c:57:4e:f8:7a:0e:50:48:3c:
89:33:22:dc:a9:e4:44:24:d1:0d:71:58:82:4b:4d:
18:14:4a:07:be:0e:fd:7e:44:65:b8:5d:04:6a:4e:
de:b1:f1:6c:5d:ae:33:9a:3f:aa:d7:80:41:90:7f:
95:c4:58:bb:86:7f:38:62:65:91:83:6f:06:51:b3:
ed:01:cb:c5:2f:7c:2f:9d:0e:6f:d3:41:f9:37:0b:
4c:fd:29:cf:8b:7c:e0:cf:0a:42:d0:35:e1:51:e5:
09:f4:0a:7b:85:04:a3:93:a4:59:06:0b:76:fd:0e:
2b:f5:9b:f7:04:a2:40:bc:30:ca:6a:69:f2:ad:48:
af:1b:34:bc:70:f6:d0:a0:c8:40:c0:13:e4:7f:ec:
6f:82:67:09:69:85:b0:2a:10:29:dd:aa:15:54:ab:
1c:32:ab:9e:dc:2a:29:c0:24:db:de:1b:59:53:00:
7e:67:0d:f3:4d:5e:b1:0d:c5:1b:67:b2:fe:7f:1a:
6a:18:4f:1b:1b:55:22:d6:df:75:19:18:e5:40:66:
80:81:e1:9f:18:1e:48:13:21:69:7c:4f:94:af:74:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:33:23:52:B9:A0:A0:E0:C6:AE:56:2C:6C:20:E4:49:28:B5:84
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:08:66:ee:52:41:cd:97:05:c4:79:40:d8:88:71:6d:dc:
d2:b6:e7:fa:69:9e:4e:18:42:3b:3e:3b:f5:e4:d6:ea:6e:e9:
6c:69:d9:63:19:5c:e8:dd:0b:3e:e6:aa:c4:1e:ad:68:47:63:
8c:72:02:42:72:cd:09:c8:db:e1:f7:92:e8:48:35:b2:82:d7:
52:d4:b1:c2:67:8f:b1:93:8f:ab:de:f6:58:8a:6e:6f:0c:9e:
1c:c8:a6:69:50:ec:8c:a7:33:25:b8:86:bc:22:3d:8f:01:e3:
6e:cb:27:62:93:23:23:ef:48:5f:21:1a:2f:7f:a7:cc:9c:6c:
1e:6d:cb:e0:27:42:12:c8:78:25:7e:45:75:34:6c:71:5f:31:
ff:38:9d:15:41:96:37:1a:d8:97:40:5a:7c:3c:e1:f2:af:62:
7e:44:81:80:53:82:1a:f1:01:02:21:bd:6e:c8:99:61:1b:b4:
b1:a5:09:10:2c:20:d4:c8:b7:7f:24:c2:cb:84:99:2b:b8:3b:
02:9b:f3:b9:11:42:70:a6:03:95:53:fe:59:6c:04:09:72:86:
b1:33:2d:47:d3:09:31:f0:f4:b9:79:cf:f3:da:11:c3:86:03:
ff:f5:0d:e3:7c:b4:de:d3:ca:39:0f:1e:36:d8:1e:47:78:62:
8c:f2:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:39 2025 by rpki-client