Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: kRACZ4++j4GRFJjK9TbX9augXZu+OfCqf69qXo+w/SY=
Subject key identifier: F8:8C:DA:60:CC:28:15:01:97:1B:E1:D5:F7:F3:B5:9C:03:49:2C:30
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 0199221ED880136B272A744B66B698485E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 14C0
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: gTNmes2uEKwPbABlwC1WannO8wchy0s5vZxmfG4EmV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d8:80:13:6b:27:2a:74:4b:66:b6:98:48:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=f88cda60cc281501971be1d5f7f3b59c03492c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3a:6e:33:b0:2a:99:08:2f:68:03:ad:09:dd:
3e:bc:e5:c6:30:d7:9e:14:61:f4:01:4c:b7:cc:18:
bd:f8:bf:c7:e5:54:c4:e6:2b:42:28:87:48:51:9e:
1d:b4:4b:33:2a:5d:80:0b:04:95:d8:3a:bd:f4:e3:
38:02:35:a2:b2:4f:69:e6:61:72:41:cb:aa:4c:50:
74:b3:e6:45:8c:7c:23:6c:d6:c7:42:eb:48:ce:5c:
0a:e5:e7:96:c6:b0:53:0e:54:af:4e:05:94:7d:30:
b2:43:c3:1e:c7:61:c7:c8:c8:0e:0f:94:fa:eb:25:
2e:40:bc:1e:d1:c2:18:63:b4:57:28:ac:a3:ef:cb:
26:8c:c0:4e:ca:da:1d:77:d9:d4:2b:d8:7b:51:7c:
ba:38:69:b8:8a:ef:bd:a8:b9:a2:4c:fc:ca:5f:0e:
b5:ee:0c:88:bf:11:bb:f4:2a:a0:f2:1b:f8:c5:5e:
fb:8f:42:37:7a:e1:6c:c3:fd:9c:4b:4a:73:ed:26:
01:3e:65:a1:05:7b:b6:ce:1f:29:60:64:d0:6a:23:
75:fa:89:4d:f5:4e:7c:2a:69:e4:6e:2f:69:81:80:
cc:93:ae:ad:17:5b:ad:61:1c:35:57:96:06:04:dd:
ff:6d:cd:88:0f:e0:02:a7:44:35:84:cb:50:8b:d0:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:DA:60:CC:28:15:01:97:1B:E1:D5:F7:F3:B5:9C:03:49:2C:30
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:a9:2a:e0:4e:ae:87:af:38:cf:69:6a:90:95:46:5e:55:
cb:b9:16:99:5a:9a:b8:69:e8:6c:34:58:e2:b2:a0:c0:18:dd:
7b:dd:2d:87:91:24:6c:e7:b0:d8:6b:e3:b2:6a:eb:ed:59:3c:
d6:34:fb:d1:7d:30:01:42:5c:17:61:4f:5c:83:65:25:d8:15:
81:dc:82:ed:c8:84:89:b7:37:c9:2a:f2:c0:b5:85:90:09:90:
6c:ed:48:54:7f:d6:5c:be:5d:63:df:fc:1a:b4:6e:63:6d:f4:
08:a1:80:74:21:af:9c:55:ad:c5:96:5b:27:b6:ea:a6:57:58:
b1:c9:8e:a4:b8:4d:20:38:93:45:22:54:1f:c8:70:c5:4f:d2:
eb:6c:eb:e2:1d:1b:a0:27:bf:b9:ec:c0:0f:d9:aa:98:6c:74:
78:c9:8b:ad:ed:43:5c:38:b8:08:52:24:72:43:0f:26:db:aa:
f7:50:a2:1d:bc:a8:99:13:98:dc:8b:3c:e2:e9:66:b9:5d:cf:
89:86:8a:d7:5e:10:b6:31:f9:69:69:de:e1:4d:66:73:a5:bc:
db:ea:cb:bb:bf:7f:88:15:36:7e:dc:f0:b9:94:b3:af:a0:d7:
22:b9:06:76:57:8d:37:2f:ca:08:8b:4a:d0:32:8a:9f:17:84:
74:62:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:22 2025 by rpki-client