Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: RBF5uNV2nD6lUvm8/NjDG2sJtXPe0t0Y4F00pUKPOaI=
Subject key identifier: D1:CD:B6:79:D5:81:6A:95:0E:57:73:5B:87:EC:73:D9:29:D8:27:25
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 01992DB5942F33A30E70F3F91EC6847228F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 041D
Signing time: Tue 09 Sep 2025 09:01:38 +0000
Manifest this update: Tue 09 Sep 2025 09:01:38 +0000
Manifest next update: Wed 10 Sep 2025 09:01:38 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: K+9wxGuzmK9uIaqqGsgpATpUYcPneuT4YSWY324LRpk=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:94:2f:33:a3:0e:70:f3:f9:1e:c6:84:72:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Sep 9 09:01:38 2025 GMT
Not After : Sep 10 09:01:38 2025 GMT
Subject: CN=d1cdb679d5816a950e57735b87ec73d929d82725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:82:bd:be:00:82:90:7e:1e:f7:07:d9:9d:
f7:d5:31:f0:0d:3e:0e:48:a8:5b:d2:82:66:72:8d:
a1:e7:46:c4:1c:36:fd:e4:3c:9e:32:55:07:a8:e7:
86:b7:e2:83:a1:c4:d3:fc:d4:96:56:b1:2c:5b:e8:
ea:3c:fb:da:ad:b2:b1:1d:de:0a:3e:d0:1a:e9:91:
68:0c:4a:25:6e:c0:9d:7e:fe:93:a5:18:db:95:c8:
72:9d:a8:9a:f5:5f:7d:44:ad:87:65:d0:d9:97:e6:
2c:19:cd:3e:8b:a7:d5:0e:77:18:9c:c3:77:0c:8a:
3d:b7:c5:e5:f1:7c:f0:a2:c1:5e:82:41:cc:d3:58:
ed:cd:47:23:ff:ce:c6:15:6f:38:eb:7a:d4:06:7f:
df:81:5f:e3:de:89:3e:47:86:7d:66:5f:04:dd:88:
87:16:ea:92:59:3c:10:fd:0b:65:b2:16:85:a3:28:
26:15:65:da:51:77:7d:c1:61:37:16:0c:7f:ef:9a:
8c:8b:ce:a3:a2:f1:d2:c4:9f:f8:bf:52:98:35:ca:
db:40:13:8f:2a:9f:bf:25:c7:b2:75:e7:d3:6e:2b:
3e:1f:e2:53:92:78:39:ef:53:83:a9:60:35:00:bd:
6b:e1:30:fb:c2:69:75:48:7c:28:97:d5:ac:fc:5a:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:B6:79:D5:81:6A:95:0E:57:73:5B:87:EC:73:D9:29:D8:27:25
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d2:29:14:9a:4a:24:40:1f:04:ab:bd:ee:be:55:32:48:46:
8d:4f:f4:8b:a5:75:b3:09:b9:82:b0:3a:67:5b:c4:96:5b:e9:
a5:2c:84:e5:5e:a3:3e:a5:83:e7:f2:60:18:5c:52:f2:c3:2e:
d0:50:0d:09:ed:2a:fa:72:0a:6c:48:d0:0a:c5:c7:b8:14:6f:
48:5c:94:f1:64:55:ad:bc:38:3f:fb:05:84:eb:a2:a8:57:05:
a8:91:61:00:b3:52:53:39:78:33:a2:19:ad:a6:12:b8:f7:0a:
b3:a4:42:0a:57:c4:cd:84:86:43:21:5a:a3:e4:9d:b8:40:a6:
d4:f4:14:a6:b2:13:9a:65:6b:18:35:06:6d:ea:1a:cf:11:db:
6e:28:45:82:db:9f:eb:79:62:4d:1f:9f:1b:ed:2d:d7:d7:a3:
48:27:04:3a:98:6a:ee:1a:9a:60:93:42:5c:96:fc:46:76:7f:
3e:40:57:84:f7:82:50:e8:5a:7e:77:69:16:01:9d:11:9d:6d:
3d:f2:41:aa:2b:88:09:31:72:c7:97:43:90:6e:1b:2f:79:08:
86:7b:86:b5:7a:5c:7e:2b:72:93:98:96:81:11:de:86:32:84:
3b:ca:a2:42:cf:4c:45:00:70:51:48:13:73:82:23:e3:5a:f3:
31:9f:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:16:19 2025 by rpki-client