Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File: 5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier: DifopWhJupjQKlaG0DpUxD19/LfeQMeEWRezuntQvNw=
Subject key identifier: 7E:F3:B9:73:9E:76:83:2F:DF:D9:FA:A1:5C:0B:83:D2:A9:59:61:37
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial: 0199221EE2BF1AD35E4E5DD14F3C76697807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number: 0547
Signing time: Sun 07 Sep 2025 03:01:13 +0000
Manifest this update: Sun 07 Sep 2025 03:01:13 +0000
Manifest next update: Mon 08 Sep 2025 03:01:13 +0000
Files and hashes: 1: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: iJC2R6DW+p1ayIUiM6u9QeA1hYHVC+89xp+aRF4+Mco=)
2: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (hash: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e2:bf:1a:d3:5e:4e:5d:d1:4f:3c:76:69:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Validity
Not Before: Sep 7 03:01:13 2025 GMT
Not After : Sep 8 03:01:13 2025 GMT
Subject: CN=7ef3b9739e76832fdfd9faa15c0b83d2a9596137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:e4:e0:0f:50:59:e2:d2:50:77:dc:ad:fb:
65:1e:f9:b5:e4:f3:e3:9a:6f:87:a1:f9:31:be:82:
9c:84:9b:2e:9b:f4:19:07:e6:6f:b3:8b:3e:a7:05:
b2:83:d7:7b:dd:50:b5:ad:29:63:c4:24:bc:7f:ec:
3b:6c:eb:c0:7a:b7:63:78:60:f5:55:07:87:32:59:
da:cd:b0:a8:5c:84:3f:0b:40:1f:b8:06:8a:6d:15:
e9:58:51:6a:bd:bf:68:94:ec:33:4e:93:f6:fa:7d:
6c:01:07:d5:a6:48:c6:2b:c7:d5:96:db:ac:d4:8d:
3f:19:2a:b6:a9:a1:6a:e5:d9:25:d2:ff:c1:d5:1b:
a0:bf:8a:52:bc:fa:d2:ec:81:df:62:ca:e9:2b:ab:
92:06:e3:90:f8:6e:a6:4e:45:57:6a:d9:cc:8f:17:
8c:3b:7c:03:76:92:ac:3e:d4:5e:52:0d:c6:ef:2b:
56:b1:04:b3:cf:38:41:73:d7:09:82:08:ec:c6:50:
6f:83:a0:ce:fe:ef:b5:b3:70:2d:19:61:35:64:b8:
3d:38:64:87:24:c2:3e:86:23:c4:81:68:59:f2:ce:
4b:4d:33:dc:a9:67:e8:e7:32:7f:b7:49:bd:c0:93:
49:7d:93:9f:10:8d:0e:58:37:fa:5c:1b:38:55:08:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:B9:73:9E:76:83:2F:DF:D9:FA:A1:5C:0B:83:D2:A9:59:61:37
X509v3 Authority Key Identifier:
keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:fc:f5:70:91:78:21:c5:66:bc:35:c0:08:97:65:fc:aa:f8:
0b:c9:58:00:7a:17:6a:90:dc:50:34:56:81:20:88:06:df:62:
78:05:00:af:60:6e:9f:0a:eb:b8:65:56:12:0d:20:2f:c5:cb:
c8:44:8a:15:eb:69:12:0d:a4:88:09:b3:e1:9c:f5:de:0f:7c:
9d:fc:1f:c8:0e:96:74:f4:b1:ae:86:fd:5d:fd:ed:9f:d9:9e:
21:57:42:b2:2f:7b:2c:56:ef:af:6a:5f:ee:26:4f:6a:c6:6d:
69:d1:bc:41:7f:38:47:f9:a9:c6:a2:a3:a3:72:a6:09:01:39:
9c:93:06:8f:42:01:db:14:af:8f:9a:05:94:1e:ef:76:1d:18:
88:cb:82:6e:26:a8:91:27:52:ad:3b:fd:db:4d:83:63:15:f1:
61:2b:63:95:5c:13:af:76:f8:ee:62:f7:e1:d8:46:8a:b4:3b:
13:d0:53:af:d7:b7:46:52:4c:9d:9a:97:bd:c1:d2:c2:54:2a:
8e:c8:17:4f:87:1d:6a:5d:e5:8f:82:dd:86:44:3a:29:ff:21:
71:05:a1:18:c0:c3:3b:46:79:5a:b3:ec:8a:96:06:e8:ac:14:
d8:78:d2:c7:dd:81:df:59:c1:64:30:86:c0:03:51:d6:4c:10:
6b:b2:1e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:23 2025 by rpki-client