Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File: 5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier: 573asE7N2aG+zXSYaKhfzu2A9kmc/TcPptEZpmkADZE=
Subject key identifier: CA:EE:47:90:57:D2:3A:E7:9F:EA:BA:F0:06:CC:CE:37:FE:42:3B:42
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial: 0199228D11047C3B28C2D87A3240658DCE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number: 05CD
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: ADwORv8wJ6AmbqdaOhtvPEm5uz09matiFdC8UKblmbs=)
2: ZchGG8A8nhqHRHzSz8wIeuBKy7A.roa (hash: fyy0T0JEDqACIzgC4O1cOibFQ+4m6gfIvZEPpikdJzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:11:04:7c:3b:28:c2:d8:7a:32:40:65:8d:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=caee479057d23ae79feabaf006ccce37fe423b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:98:a7:39:28:38:ca:78:57:fb:99:98:b1:
6e:c7:93:80:41:43:75:08:ff:3f:dc:37:3b:1a:b9:
78:d1:66:58:8a:86:99:f0:f0:4f:71:62:1a:5b:9a:
96:76:bd:a6:3a:b5:dc:b5:ec:9e:1a:aa:f5:14:5d:
c0:53:cf:b2:55:ab:51:02:2a:04:3a:f2:e5:ad:bd:
b6:2f:11:9b:8d:7a:28:15:e9:24:17:1b:e1:64:ac:
bd:28:a5:12:f5:51:cb:f4:4f:80:23:0b:92:2c:b0:
e2:a2:6a:c3:5c:ed:5d:2e:97:c2:68:ef:e3:28:d5:
bd:55:01:57:75:90:f7:65:47:ae:90:84:36:5a:bb:
50:44:ce:51:c3:ee:41:27:21:e1:46:c3:0b:5d:a7:
26:e1:a9:63:13:95:0e:40:66:78:e4:36:05:13:6b:
6b:2f:0a:0c:fe:f4:9d:7d:cd:aa:96:e7:2e:a1:b8:
7d:51:5c:d2:ce:8a:0a:21:d4:c4:68:c1:91:75:cd:
a6:77:ca:a0:0e:66:e9:fb:e8:74:2e:c6:70:9d:0a:
15:41:1f:86:52:21:2b:07:6c:b4:bf:b8:86:dc:ba:
a3:14:63:f1:f0:7b:5e:cc:09:85:92:41:df:ef:99:
c1:da:8e:10:8b:7b:02:48:9c:b8:4a:24:b5:ed:cb:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:47:90:57:D2:3A:E7:9F:EA:BA:F0:06:CC:CE:37:FE:42:3B:42
X509v3 Authority Key Identifier:
keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:24:0c:fe:67:b2:dd:2e:a3:13:aa:fb:4a:99:6f:f8:9d:
a6:91:c1:7c:b3:90:dc:c7:2e:ff:e7:27:8a:08:dd:c2:12:e4:
15:3a:3b:df:94:cf:e2:c4:dd:71:34:0c:a9:c1:fa:8b:7b:ae:
c1:56:4b:91:8a:d4:55:aa:6f:f0:c6:82:2d:b9:e7:2d:6a:7a:
13:8e:da:d6:7a:20:1e:ec:0d:fd:ae:40:89:92:b6:9d:38:82:
df:5e:0b:28:72:11:9e:e6:1e:9a:79:d6:cf:62:ef:98:d8:07:
0b:b1:a4:6a:48:63:a5:d2:64:06:08:3b:62:80:3b:b6:17:44:
ae:e3:9a:6b:2f:59:cc:3e:35:05:00:99:e5:df:f9:93:65:92:
49:98:37:3e:ae:ee:bc:d2:9c:bd:04:4c:2f:26:ab:b2:21:8d:
a8:b9:79:5c:35:6a:4d:95:3f:ab:86:ff:b5:ac:e6:2f:fd:41:
b7:a6:92:f7:62:74:05:da:bc:1d:0c:f1:03:b4:5d:68:10:3d:
0a:db:ce:fa:19:0e:55:4e:40:29:b8:b0:c5:10:1c:2a:3c:4b:
de:ce:a8:fb:f3:a9:aa:87:a9:a0:e6:1c:80:3f:62:95:ec:4a:
2c:27:49:5d:25:4e:3a:e7:e1:76:a0:b6:4d:33:a6:00:85:2d:
f9:e3:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:40 2025 by rpki-client