Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: 2BNnCLSC3+Mt/iUvwoQH4/KxT7fhK+3e5UQkveK3auo=
Subject key identifier: A6:9D:44:76:7B:0F:A9:A2:4C:39:F2:AB:18:E7:26:29:B9:DE:88:BF
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0199221E69D16B6554575CCF87287522A58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:42 +0000
Manifest this update: Sun 07 Sep 2025 03:00:42 +0000
Manifest next update: Mon 08 Sep 2025 03:00:42 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: NSb8wJF2SzOhIOa+43/bIM3AsFITnFOP2tmn/NWJYPw=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:69:d1:6b:65:54:57:5c:cf:87:28:75:22:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Sep 7 03:00:42 2025 GMT
Not After : Sep 8 03:00:42 2025 GMT
Subject: CN=a69d44767b0fa9a24c39f2ab18e72629b9de88bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:2b:49:1f:98:d8:05:42:38:cd:51:34:e4:
bb:52:6a:5f:a7:d8:cb:1a:f5:89:b0:6d:35:4e:72:
b2:8c:f7:1c:d8:c2:e1:94:72:bd:8b:90:5f:90:c1:
7a:6f:1d:87:7a:f8:06:f9:4f:55:78:da:1f:b1:72:
60:01:5c:0c:29:4c:d5:c2:34:0a:6f:65:12:df:34:
e3:18:0a:4a:69:97:74:94:b9:8f:17:17:13:50:a3:
b8:40:fb:8e:14:70:ed:cd:76:7a:69:6f:fc:94:66:
90:2e:1e:6d:42:58:be:9c:2d:21:3c:c5:24:f4:b1:
35:1f:08:68:4e:bd:1b:6b:ed:c2:bd:0c:cc:db:2b:
e2:f6:92:32:ab:51:83:69:f8:9d:20:78:73:d9:24:
da:ae:f3:12:c4:79:8b:d8:c4:ee:0f:77:e5:c9:b9:
5d:57:89:7c:ea:4f:d9:f8:1c:36:58:cd:81:c4:50:
68:17:80:4a:26:21:aa:23:76:63:90:64:d0:c1:70:
ad:a5:a5:9a:87:bc:56:12:2e:18:cb:28:1d:70:a7:
2f:8e:a7:18:8f:87:2b:19:d1:86:3d:a6:95:34:71:
dd:6e:08:11:a8:5a:3a:c0:0e:41:75:4c:ee:b2:e2:
78:5e:51:07:70:3f:07:a7:8f:ab:a8:b8:54:3a:0f:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:44:76:7B:0F:A9:A2:4C:39:F2:AB:18:E7:26:29:B9:DE:88:BF
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:00:3c:c1:d0:22:75:cb:61:e5:4e:a4:5c:98:8e:25:f0:
4b:4d:5a:9f:1e:c8:59:2b:9d:d9:c7:31:27:62:ed:91:37:45:
cb:ee:76:4e:c8:9c:b8:b9:4c:f0:50:e4:d5:18:e9:cd:5c:3c:
dc:86:b3:52:1f:25:39:e4:33:70:bd:1e:31:e0:d4:63:78:93:
12:93:25:04:78:75:4e:56:b5:13:d4:3c:9a:32:8e:65:47:1d:
85:43:89:de:bd:8f:73:03:f6:8c:41:25:0f:8c:84:15:65:97:
f8:49:34:b3:a9:b8:84:32:62:d5:12:24:a4:e7:a2:cb:57:d0:
cb:e2:14:09:ce:22:f0:ed:6c:26:cc:7b:55:7c:76:2c:85:96:
c5:ef:da:41:5d:95:f9:55:41:47:5b:42:02:de:8d:42:60:0c:
66:ac:e5:8d:1e:12:25:a4:a2:3b:62:43:09:1c:fd:57:48:1b:
66:d8:9d:b1:83:b9:2a:c8:7a:70:ca:eb:43:76:59:ce:bb:d0:
e8:99:04:25:fb:15:7d:52:0d:d2:38:dc:4f:5a:a6:81:a0:8d:
76:ea:95:ee:5e:1b:3c:4d:a1:c8:52:17:48:f4:39:ec:95:cb:
e2:a8:3b:54:77:73:99:b1:4e:55:40:b9:65:cb:7d:0e:4c:51:
42:95:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:22 2025 by rpki-client