Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File: 5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier: 0qo8Kgip60VK41wWUWTX+0RUsb2WQoxUi/1UayHhbLU=
Subject key identifier: 64:44:F6:C7:B4:D7:3D:19:C5:25:C9:3F:4A:4A:11:A7:89:09:82:BB
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial: 0199228D02D734646CC59DC729AA8D238019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: pWTaFIRZVPnJMe9zzTmP3K2JwBJHWM+kJHfk4QwKVFE=)
2: AfwJnib3HYEEvfX22iQD4QQrJJU.roa (hash: ZxsajNoVQaxEO2iOv8vpTbsfS52PxCBiq/kifGttXT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:02:d7:34:64:6c:c5:9d:c7:29:aa:8d:23:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=6444f6c7b4d73d19c525c93f4a4a11a7890982bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:b4:0c:cc:b1:33:d0:46:af:2f:ac:ad:ca:
b4:f6:70:11:dc:ef:01:93:58:d5:8c:57:e3:0b:f2:
bd:7e:fd:94:6a:47:98:e7:0d:7f:bc:16:84:26:99:
8b:ba:31:8d:9c:9b:cc:17:ee:7b:94:62:f9:b4:a6:
78:9f:27:b5:d9:48:51:93:28:7a:68:12:5a:d9:8b:
3b:16:3a:6f:9d:37:2a:44:c7:5f:95:06:ca:8d:70:
0c:76:7f:c1:ae:ef:7d:83:57:d2:de:c6:95:96:03:
cf:86:14:2f:af:5e:0e:1b:b5:e0:44:0b:98:71:ce:
83:f3:90:37:0d:d1:91:a4:06:8c:0f:0c:ad:26:ee:
74:86:2c:c6:94:f0:b1:f7:db:44:7e:eb:7a:1d:59:
87:2c:ab:24:d5:68:45:14:42:6f:26:f5:52:70:57:
1c:ab:8a:bb:3c:d0:52:37:b0:0a:12:e9:7e:c8:8b:
b0:d6:90:bf:d2:cc:3b:87:19:4e:cd:8d:e3:f0:75:
e1:61:ef:71:58:70:1e:49:5f:42:6f:cb:94:c3:92:
0a:af:69:fd:9e:32:09:65:98:77:7c:a9:51:52:b6:
c5:40:89:b0:05:69:83:88:11:78:e9:ee:bc:bf:5a:
e5:f6:95:57:a7:f6:aa:74:41:e5:46:bf:36:87:f5:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:F6:C7:B4:D7:3D:19:C5:25:C9:3F:4A:4A:11:A7:89:09:82:BB
X509v3 Authority Key Identifier:
keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:58:a0:1f:a0:06:8a:f3:c6:f9:59:b7:9e:91:57:3a:27:54:
9c:c7:33:d5:90:2e:90:58:5c:92:26:92:f8:01:0c:2f:32:38:
73:33:bf:36:39:f8:51:de:0e:67:ca:2e:ce:0f:92:c2:23:72:
8a:d9:2d:3c:07:ad:e1:08:0e:83:f4:3d:80:3c:93:35:1a:0d:
0f:48:16:68:91:0b:35:90:1b:3b:b1:0d:88:78:f0:72:fa:66:
7f:47:58:46:10:b8:df:f5:8e:22:30:54:17:d7:d8:c0:0f:3a:
f4:ed:42:97:2b:b1:c6:f7:d5:63:62:b3:1b:50:67:b4:f5:5a:
7e:fd:2f:c9:66:0d:f2:b2:55:19:64:09:0b:dc:09:5c:d9:69:
2f:6e:45:cd:23:00:a7:ae:83:0b:b0:69:9c:15:df:5d:06:eb:
50:47:df:11:88:70:29:5e:11:54:b2:31:12:87:11:67:26:21:
42:1c:b8:3f:f8:8d:11:1e:97:65:8e:3e:17:0a:2b:de:9a:37:
09:24:d2:6e:67:85:64:4c:31:f6:d3:db:2b:29:93:15:f8:d9:
16:d0:5f:6f:6a:95:4c:25:7d:9c:5e:9b:5e:9f:c1:f8:55:b9:
d0:e3:64:80:d3:83:9a:3c:48:e9:fd:32:d8:1f:8b:87:9e:4d:
b8:32:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:35 2025 by rpki-client