Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: lop3ggn6OJ2JoSDg4R2LPe8doo+c+gyg49PaRwzWzQ0=
Subject key identifier: BB:9E:5F:90:3A:41:EE:A2:16:17:71:A6:CD:DA:C5:93:DE:C6:91:EE
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019956B2345F1480BEF88E97416C91E2B5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 168C
Signing time: Wed 17 Sep 2025 08:02:23 +0000
Manifest this update: Wed 17 Sep 2025 08:02:23 +0000
Manifest next update: Thu 18 Sep 2025 08:02:23 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: zcPwgcsm+yEtZxlB7cSuv9flcTh2PkVOGO6EsldjLTA=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 08:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:b2:34:5f:14:80:be:f8:8e:97:41:6c:91:e2:b5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Sep 17 08:02:23 2025 GMT
Not After : Sep 18 08:02:23 2025 GMT
Subject: CN=bb9e5f903a41eea2161771a6cddac593dec691ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:f7:0d:62:9c:95:cd:ef:9b:88:f4:7e:72:
8a:c8:44:55:8a:28:69:cf:0a:98:f7:4c:23:01:c1:
d0:88:31:37:43:79:44:6a:04:54:79:5a:a2:46:ab:
70:31:1b:91:25:c7:c0:27:61:f4:eb:e3:2e:66:ed:
24:25:07:b6:14:05:29:bb:85:3e:fe:9b:c4:90:fe:
4b:af:ad:8b:2f:67:10:cb:92:82:91:2b:a1:2f:82:
49:5e:f0:68:40:1e:38:27:67:45:46:fe:4b:27:6f:
c0:b6:46:e1:1c:3a:a4:66:42:ae:83:57:c3:f8:7c:
ce:bd:9b:a4:6f:f0:20:bc:d1:1b:d2:52:df:0c:88:
04:63:05:44:67:d7:37:b1:c5:05:e9:f4:ef:45:41:
14:80:ee:40:a4:a2:19:a8:37:21:77:da:c5:ce:32:
0d:cd:73:7b:00:b9:2e:d7:53:71:72:c1:2c:8a:2b:
e4:39:3c:43:c2:4b:3b:e3:56:0a:f3:c1:8a:1e:15:
fb:12:29:98:94:09:1f:f8:eb:9e:83:08:ee:a4:ed:
4e:13:4f:e6:bc:d2:fd:94:eb:74:bb:df:49:01:33:
16:b3:d2:d4:04:04:df:13:8f:1a:69:99:56:33:6f:
66:36:ce:e3:3a:fc:44:20:b5:71:24:3b:0e:18:6b:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:5F:90:3A:41:EE:A2:16:17:71:A6:CD:DA:C5:93:DE:C6:91:EE
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:3b:e5:6b:4b:b3:da:6b:c9:fe:32:c0:77:2d:b0:d7:4a:
73:ce:0c:7d:f3:95:98:4c:f8:b4:58:f2:db:46:19:6b:8e:b2:
56:b2:56:71:4f:ff:b1:1f:94:27:c4:75:39:de:02:e8:b6:fa:
84:ba:ae:e8:5a:bd:a5:e1:6f:18:4f:a0:e0:3b:48:eb:9d:0b:
d6:d5:ce:ab:dd:c2:0a:eb:8b:69:df:66:0a:02:ba:52:2a:a1:
24:e0:db:c6:5e:22:47:00:ed:80:71:41:59:d5:76:27:58:0b:
be:4b:f6:a2:ee:90:d4:ce:b5:7e:bb:ef:1b:1a:a7:ad:5a:26:
da:fb:09:7d:ee:36:2c:a2:c9:68:d1:de:95:8e:36:d1:a4:53:
03:6c:5b:e4:eb:c8:42:84:32:80:e8:46:af:ff:54:0d:22:2e:
2c:4d:87:b4:7b:2e:04:51:d3:04:8a:e8:6c:04:01:ab:40:aa:
8c:47:7b:24:8e:ce:07:71:a6:19:64:eb:2c:4d:78:96:e8:ca:
73:8c:17:f8:a0:5d:e5:4e:70:f7:0e:3d:f4:c3:11:48:39:be:
a8:a0:55:a6:d6:3b:13:d2:0f:a8:4e:eb:5d:c5:5c:58:72:28:
b0:5f:85:c4:ff:c7:c4:9d:28:90:e4:9e:ab:9d:8e:36:9a:b0:
e6:d9:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 16:55:13 2025 by rpki-client