Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: PlJXyEhb8VRSekYyPt2lvk9w1oBqvBLDRRh3Gibpdx4=
Subject key identifier: 22:8D:C9:D7:4C:33:06:88:84:3F:D0:69:8B:C7:F7:E5:03:FA:92:DE
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 01991808EE90CEACBB4B940E7F49D88121E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 1669
Signing time: Fri 05 Sep 2025 04:01:02 +0000
Manifest this update: Fri 05 Sep 2025 04:01:02 +0000
Manifest next update: Sat 06 Sep 2025 04:01:02 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: 4MBYcHKS7MBYWOXl9Okf8JT7SXxvJKzw5r6o7kA834U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:ee:90:ce:ac:bb:4b:94:0e:7f:49:d8:81:21:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Sep 5 04:01:02 2025 GMT
Not After : Sep 6 04:01:02 2025 GMT
Subject: CN=228dc9d74c330688843fd0698bc7f7e503fa92de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:98:60:be:b0:12:e6:e8:ab:39:ad:e4:44:
30:59:c2:73:d2:90:0c:13:d3:0f:40:09:ef:1b:77:
ae:80:2b:67:b8:61:65:2d:41:38:17:85:ca:d7:03:
ba:20:2a:46:fa:5a:3a:db:83:76:7a:3a:03:7d:35:
36:58:02:46:b9:e9:85:e8:fb:a7:0e:9a:49:a2:26:
e5:9b:7c:50:9d:54:b4:42:33:48:05:af:dc:db:0d:
c6:12:80:8d:bc:7c:d8:15:30:fc:cc:28:c5:07:03:
89:02:e1:84:a6:08:1b:9d:da:c2:53:7f:a4:38:d9:
1a:2a:8a:a8:b7:0a:1c:1a:b5:6f:b8:e8:73:e5:03:
3f:fc:81:57:85:c8:56:c4:f6:1f:ea:e9:9b:9e:80:
01:8d:1e:d6:f2:4c:4e:4d:17:7f:d4:20:fe:84:9a:
fb:22:9d:5b:65:2d:86:18:dc:83:e6:d0:b1:f0:b6:
64:57:6a:63:fa:7c:d9:98:bb:29:10:eb:3e:57:99:
84:d3:bf:a3:09:cf:d9:8d:80:3d:77:06:65:0a:fb:
7c:e1:86:c6:84:74:a3:0e:d2:5a:2c:d1:b1:3c:d9:
6c:1c:6c:18:4d:cd:66:f0:27:06:b0:4d:35:77:1e:
a9:de:9c:4f:6d:bb:d4:d7:73:4c:79:a6:df:28:0a:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:C9:D7:4C:33:06:88:84:3F:D0:69:8B:C7:F7:E5:03:FA:92:DE
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:17:3c:eb:12:89:98:89:e1:03:24:8c:9f:8f:f5:c9:da:
12:dc:a0:56:9b:74:e1:f3:5c:75:2c:be:c9:f3:c4:71:f9:3e:
36:c0:21:86:54:3c:1b:05:1c:83:c7:19:35:94:f3:39:72:2f:
20:1e:aa:ca:9a:88:16:53:ea:e0:bb:a0:2a:1f:5b:51:86:f6:
db:ff:2a:61:46:1d:12:c0:1f:be:e2:8c:5d:d7:ad:9e:18:07:
50:a4:67:f9:77:af:ce:6d:dd:68:7a:35:f4:57:56:af:f7:91:
39:4a:06:be:7c:b2:c3:37:2f:39:9b:d3:37:a3:4f:df:b1:d6:
8d:eb:4b:fe:46:74:ab:09:45:a6:b6:5d:92:04:9b:8b:58:1a:
06:88:f5:da:c6:23:6c:3a:9d:bc:2f:1d:82:f7:ae:e0:88:10:
c5:15:08:06:40:d3:bb:38:57:17:9a:8b:d4:f5:72:aa:ba:a8:
8d:cc:74:72:89:8e:24:a6:92:9c:8d:34:38:9f:27:71:99:52:
69:67:ce:42:75:34:cb:88:1b:c4:36:ff:f1:18:ba:4e:b5:02:
10:31:46:62:32:21:5b:f0:94:f5:e4:d1:95:3f:e2:f2:09:d5:
85:4f:36:8f:74:dc:ed:5b:49:b9:b7:08:84:88:44:b5:e7:c3:
7c:70:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:03 2025 by rpki-client