Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: cS9LhwuoMmP6VTuqLEoH7TsrKY1rb86fOLVI8YJZU/Q=
Subject key identifier: AA:99:B4:FA:24:22:C6:12:4C:9C:D9:06:F9:94:97:2C:C9:77:32:BE
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 0199383970220FF8499767D7B4E697C11C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 1681
Signing time: Thu 11 Sep 2025 10:01:52 +0000
Manifest this update: Thu 11 Sep 2025 10:01:52 +0000
Manifest next update: Fri 12 Sep 2025 10:01:52 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: Be/fmC3qEfx+B5mIQs8c1i88a6huPkCwZbU/0cHVwAU=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:70:22:0f:f8:49:97:67:d7:b4:e6:97:c1:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Sep 11 10:01:52 2025 GMT
Not After : Sep 12 10:01:52 2025 GMT
Subject: CN=aa99b4fa2422c6124c9cd906f994972cc97732be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:4c:4f:f4:7d:4b:5c:76:fb:31:2b:af:e7:
d1:12:d7:9b:3d:bf:60:5b:b6:0d:ab:4e:9a:c8:4d:
4d:2b:4c:7e:e6:cf:83:2b:83:8b:31:30:74:98:50:
59:f7:77:03:ef:46:f2:98:9a:78:a7:c3:30:ba:0a:
e0:22:99:e9:1a:ba:8d:a7:a1:1b:9c:86:55:c6:87:
fa:61:81:b9:ea:e5:18:5d:2d:4c:b8:2b:31:97:a5:
f3:b9:ba:7c:46:dd:fd:3c:a9:50:63:90:7d:af:eb:
90:0a:85:0f:b3:fd:ad:07:db:f4:b2:bd:77:4f:ad:
29:0f:38:a9:5a:a3:4a:0d:74:67:6f:bd:8f:e4:4d:
8c:3d:de:b0:ae:4e:46:e5:21:a1:1c:e6:65:90:14:
5a:39:be:e1:75:46:69:e4:55:75:0b:94:ba:f3:e8:
58:e7:08:d6:ac:09:88:17:93:8f:7c:95:b9:87:3d:
e8:3a:17:73:bf:e0:59:c8:82:1b:34:5f:fa:1c:a9:
c8:ee:5e:62:2a:e4:71:47:13:c6:10:c7:8c:75:88:
fe:81:89:96:58:ed:b0:be:46:9a:a9:73:d0:7b:3c:
d2:12:c9:47:1b:6d:25:2d:e0:b5:ef:cd:f3:8a:8d:
fc:bc:7b:56:37:b7:da:d5:c2:96:e2:4d:f5:a7:d1:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:B4:FA:24:22:C6:12:4C:9C:D9:06:F9:94:97:2C:C9:77:32:BE
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b5:44:67:c0:9c:73:4f:e4:58:42:a7:e7:c7:03:4e:8b:de:
da:83:45:a9:96:55:14:44:fd:2b:c4:c3:82:f3:a6:5e:c7:f6:
4c:32:26:6e:7e:73:5a:4e:0d:6c:49:9b:fd:3f:0f:82:9a:0e:
43:1f:ac:27:36:fe:9c:c2:e2:9a:94:19:e4:a9:70:b5:04:00:
90:c7:3f:eb:34:e5:ab:df:4b:7d:6c:ad:0a:ca:1c:52:d4:c8:
19:cc:65:48:2c:f0:1d:70:c6:79:5c:18:0c:56:b2:f7:42:75:
a9:46:d1:15:a0:a7:b2:c5:76:7d:67:14:86:a7:6d:ef:5f:bc:
ac:64:86:4e:2d:e3:5e:4f:c7:e7:2c:61:e1:99:8d:a8:ef:24:
9e:1f:75:3f:61:27:bd:1c:e2:ed:ba:b8:7d:44:d5:7b:63:6a:
c5:d1:5c:7a:7b:a7:0f:54:ca:42:dd:2d:d5:de:ee:6f:2f:d6:
11:0a:65:d1:85:10:3a:86:aa:f4:38:d8:a8:78:89:3b:5a:57:
96:e8:e3:62:0c:e6:f0:70:80:6e:51:a1:10:83:dd:2b:e6:c9:
67:50:33:d3:9c:6f:3c:e2:62:58:63:93:b8:3c:1d:18:db:c7:
12:93:c1:2b:d5:a5:3d:99:62:fb:e1:5f:da:f1:3a:03:15:51:
bc:13:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:14:32 2025 by rpki-client