Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File: 5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier: QB06GvPoR/9LYKRQQlkFQx0tSsIFFAT+liO3fIb9QvA=
Subject key identifier: C1:E9:24:1B:42:BC:48:A4:C2:29:7E:0E:C2:8B:61:B3:57:DB:3F:99
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial: 01992255B8D0BC06F66F5E0FBBE46690370C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number: 0C42
Signing time: Sun 07 Sep 2025 04:01:07 +0000
Manifest this update: Sun 07 Sep 2025 04:01:07 +0000
Manifest next update: Mon 08 Sep 2025 04:01:07 +0000
Files and hashes: 1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: YCr3PltLPJ5BqZEQaoPz3gQbRGJQQMpt0nrDh13Tytg=)
2: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (hash: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b8:d0:bc:06:f6:6f:5e:0f:bb:e4:66:90:37:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
Validity
Not Before: Sep 7 04:01:07 2025 GMT
Not After : Sep 8 04:01:07 2025 GMT
Subject: CN=c1e9241b42bc48a4c2297e0ec28b61b357db3f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:4d:de:4a:45:00:aa:05:88:c1:f6:c8:41:
95:af:ec:8c:ea:5e:11:63:5e:37:82:37:25:b9:f3:
39:76:16:12:d5:44:43:74:d3:e1:4b:87:c7:ff:8a:
31:bd:01:9f:c2:49:a1:dc:a5:42:0d:0b:d3:ca:7c:
f2:22:ac:c0:47:b9:fe:4e:45:69:53:38:a7:c4:92:
53:e0:87:44:56:fd:6a:ab:fb:33:70:e4:58:5f:db:
2b:83:c3:28:fa:7e:f5:ef:77:c3:97:06:92:d6:fc:
9d:85:70:ee:af:23:1e:41:66:78:f3:fe:93:16:8a:
0f:ad:c0:98:9b:0b:d3:40:61:df:9c:5e:42:4e:ee:
a3:b6:b6:20:a7:86:72:06:89:17:3f:cd:3b:f4:4a:
46:6c:95:aa:c4:b6:64:0a:f6:02:e3:c2:ef:c3:32:
9f:58:17:a9:7f:30:43:09:8e:b9:2a:d0:e0:62:56:
6f:47:c8:09:95:78:1d:9a:10:2e:95:b4:97:27:b0:
5b:00:3a:72:ec:f9:f2:87:49:90:bc:2d:06:22:aa:
03:d2:1d:ea:a8:47:84:48:09:d5:2e:bb:bc:60:33:
be:39:e7:a5:f7:04:6b:fa:c3:4d:3c:67:2b:14:4a:
65:17:27:9e:49:3d:c3:d7:f7:67:ba:04:0f:a9:fe:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:24:1B:42:BC:48:A4:C2:29:7E:0E:C2:8B:61:B3:57:DB:3F:99
X509v3 Authority Key Identifier:
keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:37:9d:b6:63:8d:92:e0:c3:76:cf:60:c5:d4:a2:d8:36:73:
88:bc:0b:6f:43:96:d7:46:da:6f:c1:b8:36:6c:82:f1:a5:32:
90:32:72:28:78:35:2c:ba:97:04:9c:06:b4:63:e9:f0:ac:12:
da:55:11:27:ba:cd:33:c0:33:c4:e1:e3:c0:c4:99:d2:01:cf:
79:98:fc:51:66:2f:cc:14:b0:77:29:40:8c:d5:a5:d0:77:59:
27:ad:76:2e:f2:4d:c8:5a:11:f6:56:a8:49:c7:99:e3:e0:ca:
6b:03:49:04:6b:fb:a7:f0:13:ff:73:6a:ab:7d:01:65:8d:4b:
7f:d9:b6:93:a7:36:e6:9e:88:d1:03:77:67:cc:16:8c:41:09:
68:94:02:bf:54:8f:44:72:9e:23:2a:3d:77:81:a0:89:94:ce:
a5:dc:35:7b:9e:3d:6b:0c:74:8b:be:46:b9:08:11:10:ca:b8:
58:43:91:21:ec:3a:1a:3d:14:26:f6:33:e5:bf:42:d9:4a:c7:
37:7e:3e:e4:db:f2:b2:e2:48:30:43:13:4e:69:bd:3d:88:d4:
c5:f2:4e:f9:66:f6:d0:11:13:c7:41:73:21:26:63:ee:db:0f:
0d:11:9a:8a:21:2a:f7:53:a2:3a:19:aa:38:7a:ab:5c:f5:a4:
68:60:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:06 2025 by rpki-client