Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: 4B31AF5onbHqOX1y6z1QqRP9ezz+MuBbMLDrNM1TumA=
Subject key identifier: A6:72:16:58:28:F8:71:2B:1B:08:F8:D5:10:66:20:DF:D2:7C:57:69
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 0198590FB7BFB3B7C30B70FE91AD16B472CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1435
Signing time: Wed 30 Jul 2025 02:00:58 +0000
Manifest this update: Wed 30 Jul 2025 02:00:58 +0000
Manifest next update: Thu 31 Jul 2025 02:00:58 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: fKMkUl9hIbSXg4kS4vkIXSb2KOfB/5F1eSQGWwzyfsw=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:b7:bf:b3:b7:c3:0b:70:fe:91:ad:16:b4:72:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jul 30 02:00:58 2025 GMT
Not After : Jul 31 02:00:58 2025 GMT
Subject: CN=a672165828f8712b1b08f8d5106620dfd27c5769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:65:2b:e7:fe:3f:2e:df:0b:bb:c1:36:c7:
32:94:b9:dd:42:00:35:3b:6f:c8:6e:ab:80:e6:5e:
91:a3:2e:21:3a:51:dc:04:79:3d:64:08:b4:9b:55:
15:65:3b:fd:97:52:fc:53:c8:95:ff:cb:00:94:09:
e5:5a:b5:bc:71:10:a4:41:9e:95:3f:57:f8:f1:01:
5f:cb:77:ea:5b:53:ae:c6:01:36:07:bd:11:96:4b:
ec:d7:be:e3:10:ae:26:9f:ee:a7:12:55:e4:ef:d9:
48:2e:93:8e:be:7f:94:be:c8:00:67:95:d3:46:30:
0a:db:30:41:48:4a:15:95:2f:eb:c4:e5:b5:07:ad:
ec:3c:bb:1a:ef:25:af:19:2b:42:1e:1d:8b:6e:67:
68:ac:c9:1d:ff:d7:d6:80:ac:f3:4f:84:bf:b6:ab:
33:fc:76:76:1d:cc:6e:09:59:2a:58:ab:0c:07:9d:
ae:92:b5:32:a4:d9:2b:46:10:19:df:9f:e8:3d:46:
4c:d0:af:dd:f4:5c:19:03:d7:92:6a:92:00:68:44:
b8:a5:21:63:d7:c2:c9:68:e7:a9:9c:08:cd:66:e9:
8b:b1:68:ed:ce:e3:f0:50:8f:55:ef:65:e7:14:25:
78:51:b4:8e:d1:89:d2:46:09:33:3f:01:5c:d7:7a:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:16:58:28:F8:71:2B:1B:08:F8:D5:10:66:20:DF:D2:7C:57:69
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:8c:43:e4:8e:20:11:08:b5:9a:dc:22:e3:59:64:e1:5c:
50:dd:25:fa:6f:27:fa:e8:1a:79:1d:e3:50:56:c1:0b:f4:b0:
9f:4a:93:df:7e:27:84:ee:be:18:aa:73:26:5e:5e:1e:58:ee:
87:88:81:05:58:70:20:a1:ff:32:95:a6:aa:95:75:71:fa:67:
77:b5:0f:b7:49:77:54:ac:32:cf:60:0d:bb:57:5c:1d:1d:7c:
3d:63:79:bc:0a:80:bc:29:6a:56:54:ae:82:12:cc:4d:ed:fc:
95:c5:a9:6f:61:3d:3d:11:ff:1f:ad:4b:95:70:ca:ac:a2:bf:
9f:1f:bd:d5:b4:ec:46:23:41:4e:9a:29:25:95:a4:9c:a4:de:
8b:a9:81:5b:87:c6:53:92:8e:b2:46:e5:59:a4:c7:99:dc:ae:
72:3c:4a:c1:97:51:07:05:15:4e:ef:be:ab:4d:e2:51:dc:1e:
56:00:aa:70:ea:68:74:b8:1f:ad:23:66:d6:aa:b2:ec:a4:1d:
c8:77:aa:a0:2b:fa:ee:6e:27:05:6f:a0:b4:1d:2e:1f:91:fe:
12:ba:3d:7b:32:92:91:b4:6a:95:6d:9a:25:ba:61:09:fb:f5:
e5:ca:4f:3b:7c:02:62:4f:78:ca:3f:1d:6f:89:f8:ae:f8:e4:
61:dd:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:52:21 2025 by rpki-client