Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: yrlbUrgO2KuV+kYGdfuFDMH0KHhE6+tDF/eqj3afduk=
Subject key identifier: 0E:1D:0E:66:B5:B3:FF:3A:7A:36:CF:0E:2E:DC:65:65:5C:64:67:BB
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019931920301BDE08E1C7C82CFD3EAF0C7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 070C
Signing time: Wed 10 Sep 2025 03:01:16 +0000
Manifest this update: Wed 10 Sep 2025 03:01:16 +0000
Manifest next update: Thu 11 Sep 2025 03:01:16 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 8PiKBma1Xw9IsQpUnkTSe+BqAUU50M1VvrGbvKUYbxw=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:92:03:01:bd:e0:8e:1c:7c:82:cf:d3:ea:f0:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Sep 10 03:01:16 2025 GMT
Not After : Sep 11 03:01:16 2025 GMT
Subject: CN=0e1d0e66b5b3ff3a7a36cf0e2edc65655c6467bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:27:41:01:4e:65:36:1b:e6:2a:33:92:39:
8c:83:2b:46:8b:93:33:1d:99:d9:24:df:6b:6e:86:
37:40:c4:09:6b:40:50:e9:a9:f3:29:e9:99:12:a1:
31:85:29:2d:fe:6f:cb:31:e1:7d:a4:c0:24:88:76:
6e:ef:21:86:af:f3:b6:1a:47:b7:6b:70:0b:a1:43:
61:78:fe:34:b7:cd:6d:2c:a6:4c:2f:5b:7c:51:ab:
0f:e5:44:b1:aa:0b:7a:0c:a7:c6:20:8a:e8:1c:c6:
6c:6f:db:53:29:4d:2a:11:2f:5f:e3:80:e4:33:7a:
15:94:2f:22:4f:55:88:1e:56:3f:9c:a2:ea:5a:3b:
87:4a:2a:f7:c9:e9:a1:8b:b8:10:13:66:08:48:97:
9c:28:7c:85:08:48:2a:93:61:db:99:0b:59:42:1e:
6c:10:ca:c6:6c:54:dd:68:46:0e:41:8d:7d:72:c8:
3e:63:82:0e:2a:e2:3d:ee:49:8a:02:c3:52:cd:f8:
2f:e6:4a:54:df:a7:30:c1:53:d0:e8:9a:47:23:7e:
89:38:40:da:4e:b2:63:95:c2:91:3e:da:43:bd:07:
3c:a7:83:45:db:59:54:1d:65:3e:64:68:de:bd:d2:
c6:55:ae:dd:54:a4:d8:63:d9:01:5b:8d:92:5a:45:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:0E:66:B5:B3:FF:3A:7A:36:CF:0E:2E:DC:65:65:5C:64:67:BB
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9e:9b:f5:42:af:2f:99:a2:c7:55:d2:9c:b3:e7:69:bc:2d:
7b:e1:2b:91:2e:b4:ba:cf:81:93:8b:9b:ea:7b:85:59:59:81:
f0:74:c8:26:b9:1d:dd:9f:59:92:5f:74:ca:06:88:95:37:fb:
82:97:2c:03:df:a6:3e:80:ec:2d:a6:be:e9:aa:34:83:26:6f:
45:27:6d:14:89:ec:42:60:07:ee:a6:04:a5:1e:4e:b8:2e:b2:
ff:d5:55:dc:7f:7d:d3:c7:61:a0:8a:bb:2a:30:29:c1:b6:23:
78:06:8a:5b:c2:d8:b8:32:86:f4:65:85:b9:59:48:cc:29:24:
d4:03:de:c7:b4:2c:3a:88:9f:1d:dc:d1:34:58:34:6d:53:84:
ed:ff:0a:5d:86:4f:e1:a6:11:a2:2d:47:5a:fc:f5:1c:ff:2c:
2f:c9:15:6b:9a:d7:ee:4a:e5:8f:79:74:9f:bd:c7:5c:cf:82:
d3:fa:2f:0d:c8:00:7b:7f:86:52:d7:97:d8:87:06:38:af:9e:
68:f4:82:f4:61:73:be:52:0f:d7:08:71:33:5d:28:30:72:18:
83:19:8d:f1:8d:01:11:02:7b:f5:88:64:75:0d:38:7f:d0:ae:
06:d4:5d:c7:06:14:a6:d4:c9:15:f1:da:18:64:2a:5a:9c:56:
54:eb:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:33:19 2025 by rpki-client