Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: QYi8XOsigcyaGP0qQ4QzTy+aPnW3lEzwLdUetal+0yM=
Subject key identifier: A9:B6:8A:C7:88:27:33:5A:87:C8:BE:D7:7D:E5:4A:20:11:45:E6:6E
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 0199304836749F9CFDDE2CFC3E9B38010CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1689
Signing time: Tue 09 Sep 2025 21:01:02 +0000
Manifest this update: Tue 09 Sep 2025 21:01:02 +0000
Manifest next update: Wed 10 Sep 2025 21:01:02 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: 6iZy++kOwUWIv7uEBwNVFNdxC2KGbHr2fr3z7+8G84Q=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:48:36:74:9f:9c:fd:de:2c:fc:3e:9b:38:01:0c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Sep 9 21:01:02 2025 GMT
Not After : Sep 10 21:01:02 2025 GMT
Subject: CN=a9b68ac78827335a87c8bed77de54a201145e66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:ca:08:1c:06:0f:d0:53:46:22:cb:09:42:
97:75:09:cc:0e:59:4c:3b:fa:fc:4a:c7:44:18:f6:
94:0b:bb:27:ed:78:51:fa:58:c1:7d:1c:9d:8c:e5:
54:df:e3:a2:f0:b5:15:e4:46:29:80:65:4b:ca:7f:
36:a2:41:1d:d9:4a:77:c4:03:8e:2c:c9:c6:97:3f:
a9:82:ef:6c:e9:77:bd:0a:ca:05:1e:63:10:13:fe:
72:e1:8b:bc:1a:b7:04:6f:2c:3d:61:a3:26:fe:bc:
3a:27:92:14:a5:df:29:f7:9f:36:6a:4a:d9:ce:32:
6a:61:14:e5:d9:4c:c3:b0:f3:91:bc:fd:fc:a7:9b:
ae:f3:2d:a3:d7:1e:0f:45:20:53:59:70:97:37:63:
e5:c5:e4:0e:e7:d5:c3:e7:48:46:b7:b2:d4:0d:fa:
ef:e7:b3:3b:36:62:2e:d6:1c:08:cb:db:74:54:16:
ae:be:10:bc:90:d8:d7:83:d6:53:2e:4d:e0:d0:1a:
88:70:52:43:6e:60:5a:ce:e8:ff:44:7a:e0:29:81:
ec:a8:d2:a6:a7:9b:81:78:a7:e1:ed:05:4d:1f:72:
a0:35:b1:4c:61:ff:c9:4d:66:a6:7f:20:14:7f:49:
f2:36:bf:39:6d:e2:2d:92:16:c1:c2:58:83:ce:ed:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:8A:C7:88:27:33:5A:87:C8:BE:D7:7D:E5:4A:20:11:45:E6:6E
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:d8:1d:05:94:19:4f:96:d1:92:8d:a9:b8:df:40:af:c9:
10:a6:d2:15:0d:5d:fb:dc:67:d1:39:65:98:89:28:e5:b4:a3:
3f:ba:be:30:fe:5c:63:a1:42:5a:88:15:92:49:49:a1:67:a3:
50:2c:ad:97:73:65:b8:dc:63:3f:e5:33:37:b9:ad:d0:7f:ac:
b7:3f:12:48:51:58:5c:7f:20:d6:3a:ea:78:57:d2:49:3f:14:
30:35:dc:62:44:d7:51:d2:66:eb:dc:53:99:ba:e7:a8:a6:ec:
28:dc:9d:04:a9:70:1a:9c:29:e3:19:fb:ca:13:02:c0:89:c5:
ad:e3:29:5a:c6:d3:2a:05:ac:e3:5b:21:9f:83:95:91:ab:5d:
a5:fa:75:d5:62:0b:c9:24:d5:14:0c:fb:03:c7:b6:a8:fb:6a:
47:79:bb:b1:69:d2:4e:4b:f3:27:f8:d2:15:2c:eb:92:5f:58:
cf:27:08:93:3a:0c:d1:4c:b4:cb:09:4c:13:39:cb:22:a4:59:
e2:b1:b0:26:42:9a:29:06:9f:6b:0d:00:38:a4:f3:ca:42:3a:
37:51:da:83:27:94:65:90:9b:98:02:b2:b1:31:a7:af:99:07:
92:65:cb:d1:0a:b5:d9:13:56:4e:f5:e3:b7:22:9b:71:e7:cc:
59:97:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:11:51 2025 by rpki-client