Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: kWExr+5PKjGG2ub4WjS0RWDiMwNKn60hPAoJiKS/ptI=
Subject key identifier: A4:50:61:BA:3B:73:45:22:6D:4E:29:5D:63:4A:C5:CE:BA:64:DD:6F
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 019921E764D2542973488169B0F6C4AB312E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 134B
Signing time: Sun 07 Sep 2025 02:00:36 +0000
Manifest this update: Sun 07 Sep 2025 02:00:36 +0000
Manifest next update: Mon 08 Sep 2025 02:00:36 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: HwRgdqfjQUCIemxRqtG9KxmRM0ZCQ1tUusbqrdlzvn8=)
2: dpj-gbwzbz00wBAZxRLu2JRmudE.roa (hash: ZvHTjTrZScF3pxyYvHGxOD3c/TPO+OkBRoCVWJ9HqnA=)
3: gvC7ao5sxrnrTpKAU7Z6Kxl3n4w.roa (hash: 6Il2DCAKJW2GDXUMq30h38NoaFgqqtmGFfPCqtO+DUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:64:d2:54:29:73:48:81:69:b0:f6:c4:ab:31:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Sep 7 02:00:36 2025 GMT
Not After : Sep 8 02:00:36 2025 GMT
Subject: CN=a45061ba3b7345226d4e295d634ac5ceba64dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:89:d9:aa:5a:9c:1d:6a:6d:da:ee:06:7b:
ca:bd:1e:7a:55:2a:18:40:09:ce:7f:13:9b:ef:3a:
5f:87:04:d8:45:aa:63:f6:30:a8:28:70:4c:43:9f:
35:26:5a:9c:cb:c2:3d:d5:63:c2:4c:d2:0b:23:6f:
5c:ff:cd:34:21:4e:00:f6:34:de:30:12:a6:5f:eb:
06:8c:8b:2c:48:6c:01:54:bc:d3:9e:80:7b:54:6b:
a0:e7:99:f3:a5:e7:df:a0:f4:44:7f:0e:a9:86:cd:
8e:36:2d:78:2b:37:e3:c7:c0:c2:23:5e:a7:9b:75:
ce:29:c4:69:48:d4:58:bc:c0:0e:38:ce:b0:53:e4:
0d:45:0e:ed:62:f7:bc:11:b4:a9:3c:40:46:7b:f0:
97:88:56:e9:98:9b:d6:aa:7b:14:2a:da:25:01:33:
f1:ed:bb:bb:3e:d9:6d:4d:68:52:ae:45:f4:68:07:
ee:c3:3b:a5:91:48:fa:17:0e:85:85:0c:b8:9d:5a:
16:f0:9b:27:64:e7:8a:4d:31:44:c6:a5:49:5c:02:
9e:24:42:94:7b:f8:66:13:33:26:b9:d0:ca:b8:97:
3d:62:b9:a9:9e:b7:96:00:42:41:d6:61:57:04:8f:
b9:7f:23:3f:90:b3:8a:65:bc:c9:d7:c8:12:e6:0e:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:61:BA:3B:73:45:22:6D:4E:29:5D:63:4A:C5:CE:BA:64:DD:6F
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:1e:ac:af:7e:bb:e2:dc:ac:f7:c5:29:c4:fd:3f:ea:69:
c4:14:05:5c:11:63:38:03:ff:cd:70:21:34:e6:d5:c9:83:af:
7f:01:51:0d:63:0b:54:ce:6f:7a:ae:32:3a:32:04:33:84:fd:
d1:d7:60:c2:fe:45:0f:01:83:1b:a3:e0:a7:70:3d:31:6e:07:
ec:b7:f8:94:4b:75:89:65:0b:6f:b1:13:e5:1f:ea:19:2f:4b:
84:0b:ce:13:8f:58:16:2d:e2:9a:14:bb:7b:3b:82:a5:a1:0e:
c4:9a:f9:cf:38:6d:bb:56:35:64:da:65:d0:b1:fe:2d:7b:6b:
ba:05:3d:5e:f0:a3:ed:dd:6c:55:87:1d:23:a2:e7:1b:6a:cf:
2d:81:f3:c1:6e:01:d2:94:66:f5:a3:f0:af:40:ef:d0:c1:f5:
fa:f2:c3:fe:58:1b:b9:e5:03:6d:df:1f:9a:f2:8f:36:b6:9e:
ff:76:c1:49:68:00:c8:a7:3b:32:71:40:97:28:52:9d:01:e3:
d5:99:06:b9:55:9b:83:b6:61:bd:df:40:f6:72:ab:51:ad:10:
29:8a:2b:06:bf:73:72:48:36:03:70:0c:b2:4c:a6:c5:63:6c:
33:53:0f:35:16:0f:5d:b8:04:18:09:79:c5:5a:63:92:3f:96:
20:df:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:03 2025 by rpki-client