Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: b2GfarXImnT77JWxA4ApTpApWl2PbgT/A5VwhBg+dAY=
Subject key identifier: 50:16:28:7E:CB:C2:4D:C8:A4:7B:9A:70:CC:ED:37:48:04:05:59:D7
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 0199228D343D2CA41EE09A8E3246A5856C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0D8F
Signing time: Sun 07 Sep 2025 05:01:43 +0000
Manifest this update: Sun 07 Sep 2025 05:01:43 +0000
Manifest next update: Mon 08 Sep 2025 05:01:43 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: zP6fT0+OrDjEN2sjs9EG6Tv0lkdWGXGoxTdSb0J6V3M=)
2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:34:3d:2c:a4:1e:e0:9a:8e:32:46:a5:85:6c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Sep 7 05:01:43 2025 GMT
Not After : Sep 8 05:01:43 2025 GMT
Subject: CN=5016287ecbc24dc8a47b9a70cced3748040559d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:95:ed:59:02:2c:de:ff:4d:81:cb:fd:29:
11:d5:4f:27:19:a7:3c:eb:8d:f8:48:22:1a:c4:57:
73:3c:71:04:24:96:9d:7d:0f:2e:03:75:c3:dc:2d:
ed:a7:78:a9:64:e3:50:16:34:21:ab:83:0b:3d:13:
3b:9a:51:00:1e:c7:26:ca:e5:88:70:e0:0f:9f:e8:
3f:cb:62:f2:59:81:27:d0:47:05:9c:49:df:f9:26:
f4:95:1e:bc:0d:11:ab:ba:2e:cf:ce:47:e1:34:f8:
29:6b:09:a2:b9:e3:81:fa:dc:c2:90:9d:0b:4e:47:
92:50:50:3f:c7:ff:bb:d0:81:40:85:77:bc:c2:d5:
89:0e:a3:59:c4:93:55:6b:09:a3:90:f3:2a:67:d6:
7d:98:57:97:45:72:58:c7:b4:23:59:5f:6e:99:42:
75:d8:ea:1f:7e:3b:2c:99:da:90:4d:23:fa:2e:81:
6f:ed:9c:6a:00:e3:24:f0:05:76:fd:d8:2e:eb:05:
d6:c8:e1:5f:f7:24:72:d8:f8:8e:8c:fa:a5:72:f5:
1f:1a:5b:ed:8d:c0:78:df:9e:8a:a2:7a:77:41:8a:
10:e9:d2:d3:9d:31:ef:b8:20:c4:74:a6:ae:38:5a:
61:8e:89:53:04:e4:0c:9e:6f:c5:5e:99:12:62:08:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:16:28:7E:CB:C2:4D:C8:A4:7B:9A:70:CC:ED:37:48:04:05:59:D7
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:db:aa:c9:a0:88:a9:8d:c0:e3:c1:a3:95:f9:8d:c5:85:
53:a7:25:f5:4c:f6:a7:99:6d:ef:28:dd:96:ab:08:6e:13:9d:
05:d4:27:ff:09:87:ac:9a:2c:31:30:b3:37:09:e8:62:77:be:
21:b1:b0:bf:f5:33:77:b2:33:d8:7a:93:cd:1a:d5:bb:8b:96:
11:52:cd:bb:4b:5c:af:34:69:97:a4:de:2b:1c:4b:15:76:29:
b8:b0:a7:b3:fa:9f:78:ee:ea:f9:50:da:06:25:78:16:16:ef:
a4:08:4c:f6:3b:0c:a8:8f:fa:ed:d3:ca:16:a1:3d:5d:c6:c9:
76:77:26:23:f6:0c:68:2c:17:79:9c:a8:c3:77:f9:63:22:ea:
11:61:3f:01:67:6f:9e:f8:11:6f:6c:74:94:ef:f9:91:fd:14:
f0:1a:36:f8:66:15:8a:40:29:af:8c:8f:4c:77:4b:57:8c:1f:
08:25:9f:e6:d4:04:75:58:ea:7e:22:db:d6:99:57:39:17:23:
92:c2:b5:44:32:1c:b6:60:0c:9e:5f:e4:0f:1a:57:03:ff:3c:
da:db:a9:ac:b5:fe:d8:33:70:3e:57:42:ad:30:cb:48:e3:82:
90:2a:3d:b2:4a:51:a1:41:df:c5:39:c0:a9:72:fa:3b:bd:9a:
68:fb:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:34 2025 by rpki-client