Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: Kvfkjrz3DyI1kR3pioMjINBva5e99+vLBQ75bWqniKY=
Subject key identifier: AB:81:88:5D:3A:FE:4D:DA:1F:87:8C:7E:6C:73:9A:4F:62:2E:E7:A1
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019921B141F05BBA71BF686AEDE941302E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:01:28 +0000
Manifest this update: Sun 07 Sep 2025 01:01:28 +0000
Manifest next update: Mon 08 Sep 2025 01:01:28 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: O8ClDKD0NwMGD9VVLaUCSszMuIN2jRZlkvNM3WoQpnY=)
4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:41:f0:5b:ba:71:bf:68:6a:ed:e9:41:30:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Sep 7 01:01:28 2025 GMT
Not After : Sep 8 01:01:28 2025 GMT
Subject: CN=ab81885d3afe4dda1f878c7e6c739a4f622ee7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:00:74:35:3c:08:1a:3f:86:d7:19:bd:2f:
89:a9:57:29:61:37:ee:9d:e1:24:4c:7f:3b:78:2f:
9d:bb:f1:ff:75:cc:e7:57:66:40:ae:63:6d:0f:79:
c3:3c:df:80:99:88:f7:e0:8c:96:8e:c2:a9:ee:b2:
42:39:cf:11:3a:fa:67:01:fa:d2:04:7a:e1:c5:40:
3a:16:68:48:0f:f3:09:67:44:32:20:57:ef:91:76:
6e:5a:33:bb:06:9f:2e:18:ab:e7:72:01:35:6a:ca:
25:b7:d7:7f:73:e2:4f:e7:2f:3d:d2:a6:aa:bb:1a:
76:1a:22:41:ce:33:f1:af:cd:82:43:0b:c2:e6:6e:
ef:3b:0f:20:9b:f8:21:35:be:3c:81:8a:65:c3:2d:
70:1a:39:52:96:fd:4f:e3:d2:6f:57:1e:88:3e:e1:
5d:a8:1e:97:e6:d0:e7:1b:e7:16:00:3b:7d:2c:a4:
f9:01:fc:4a:0a:ee:64:64:cd:5b:22:b1:b5:12:27:
7e:da:8d:65:fa:42:9d:4d:ca:a4:4e:85:62:50:f3:
70:91:2e:27:af:02:d0:f4:43:76:0e:a6:b1:92:54:
e7:db:47:94:a6:bf:4f:1a:9c:07:a7:0e:3c:9f:24:
a3:d1:67:bf:8d:89:33:7f:88:a9:f4:08:40:ca:4c:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:88:5D:3A:FE:4D:DA:1F:87:8C:7E:6C:73:9A:4F:62:2E:E7:A1
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e2:3d:ae:1f:86:80:2f:71:d0:4f:78:78:84:75:b8:33:bc:
0b:f1:81:6f:be:e3:7a:83:4f:18:18:7c:d6:24:e1:d1:a4:af:
2b:37:e8:39:0c:e8:1e:ad:ae:0c:bd:4b:93:0a:1c:59:ec:69:
db:96:f1:57:a3:ec:db:99:5c:b3:7e:26:1b:12:da:08:0f:44:
bd:f8:67:48:f1:3d:22:eb:7d:e1:a5:6d:85:41:33:07:c6:c5:
08:7d:57:c6:b8:77:d2:fa:fd:1c:66:61:32:b7:18:4b:1d:35:
82:56:2e:a0:36:93:08:65:af:7c:ed:ba:6d:ba:a6:fc:e6:c6:
98:3f:af:19:4a:41:2c:71:b9:64:55:e6:09:f2:45:3e:47:cc:
76:9d:a2:15:1b:55:a7:6d:44:5c:ff:4c:cb:11:a8:58:42:1a:
fb:ba:5d:00:20:4b:b5:97:24:a6:bc:c5:ab:3e:7b:65:58:36:
82:61:6e:88:4b:eb:50:ab:f1:e3:95:89:a9:21:e7:19:ab:44:
1b:08:fb:96:29:fa:10:5e:23:72:41:30:a0:07:e7:37:48:14:
6c:2b:29:f7:db:ec:ee:18:53:1b:ed:07:46:3e:b3:4e:62:d0:
40:b5:fa:1d:2c:b4:e3:2e:95:70:64:9c:72:93:36:8f:f9:e0:
93:6c:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:33 2025 by rpki-client