Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
File: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft (raw, json)
Hash identifier: /HzSfgpDPculKrVImCokNTNqXLbcd/iUezor1G9I0M0=
Subject key identifier: 48:0B:2F:F3:72:68:B4:58:05:F2:D6:45:7C:D9:9D:65:E1:51:0B:4F
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 019921B1C9B6351412E114CC2F32E04C2413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
Manifest number: 162A
Signing time: Sun 07 Sep 2025 01:02:03 +0000
Manifest this update: Sun 07 Sep 2025 01:02:03 +0000
Manifest next update: Mon 08 Sep 2025 01:02:03 +0000
Files and hashes: 1: 5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl (hash: QMkwoUHl6ZIUKeYUadl5hWNHSD0xCgrQ5ZY3Qls5cuU=)
2: KRSzUBxyLebIHKF4Pc56YInJ7G4.roa (hash: bYjIh5qsMD47j13Dp6UvpgvAJLXcSZU6nC4Ef8AfKgY=)
3: twkvRlKBbWGvXorm0QWgUQL2aXw.roa (hash: RdMA83SLaDMkPV3ykgU6NQ7K1hlLuBXMiacxW37ziVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c9:b6:35:14:12:e1:14:cc:2f:32:e0:4c:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: Sep 7 01:02:03 2025 GMT
Not After : Sep 8 01:02:03 2025 GMT
Subject: CN=480b2ff37268b45805f2d6457cd99d65e1510b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:7d:77:81:e1:51:36:bc:c4:01:99:d7:9e:
d6:17:83:6c:3e:5e:12:bc:ad:3f:36:a4:69:9f:81:
17:60:ff:75:86:01:94:a6:52:a1:56:28:4c:93:82:
85:77:39:7d:77:a3:be:86:52:4e:ce:2c:36:df:58:
a8:ff:b8:c5:71:a4:f1:06:22:9e:e6:a4:f2:fb:6f:
49:1a:5d:be:79:50:8b:23:29:44:ef:7e:fc:5b:78:
ad:3a:8a:60:d5:83:37:2b:67:f8:a5:64:ff:0d:58:
ad:54:34:55:1c:8a:bd:8e:fa:80:ff:7d:52:f4:42:
c7:ea:2a:f6:9e:fc:11:eb:47:b6:6d:a5:6a:71:90:
9d:f9:e6:1b:43:3e:84:5a:14:b9:02:41:b9:f4:d3:
03:cc:e9:47:11:d6:77:9f:7d:15:c1:00:3b:9d:a1:
ed:b5:cc:ec:64:3b:23:e1:11:8b:e0:5a:35:d8:69:
92:b8:03:f3:d6:16:80:35:47:96:40:ba:57:74:b3:
d9:f3:b0:1d:3b:36:ab:58:24:ef:83:ff:d1:e4:bb:
03:e7:4c:00:1c:d9:97:de:90:34:c2:50:11:69:36:
ff:52:4c:c7:da:e5:93:a9:a4:7e:50:26:4f:80:68:
c0:d4:e6:c7:b8:39:20:10:c7:9b:f9:80:6d:ba:76:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0B:2F:F3:72:68:B4:58:05:F2:D6:45:7C:D9:9D:65:E1:51:0B:4F
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:59:74:50:1a:e9:4c:43:b9:08:96:5b:b4:b3:f2:e4:05:9e:
da:fd:11:80:b1:51:27:18:6e:73:1b:dd:67:1b:28:fe:40:24:
3c:3b:03:78:27:93:42:24:2a:3d:58:2d:e5:a5:4b:79:b9:95:
df:5c:73:a4:db:2f:ff:70:03:39:e7:a2:84:37:ec:5a:f2:cf:
49:fb:2a:46:df:88:37:02:65:d2:e7:b8:38:0a:93:dc:64:90:
7d:d5:5d:8c:03:99:a1:57:69:9c:3d:3f:73:09:24:6f:d1:20:
46:1f:cd:13:78:b3:0e:88:98:e3:bc:4f:0c:93:e7:d5:59:de:
f3:3a:dc:8d:f7:33:31:ac:04:2e:56:35:4c:1e:a3:8e:cc:57:
cc:97:84:8d:6a:b3:38:19:67:9d:2e:c2:8f:69:24:e3:25:d7:
39:6d:13:6d:a6:72:bb:7a:b9:b7:eb:81:87:6d:f8:de:e1:b8:
55:46:4a:96:ba:59:f2:74:d9:09:5e:8d:b5:5a:fa:13:6b:18:
22:23:39:49:75:b8:25:89:24:e2:ce:b2:63:01:6b:20:db:c0:
92:d7:f5:fd:68:9c:cd:b8:49:68:d6:fc:73:51:57:64:e3:f5:
16:9c:19:fb:85:32:00:32:e2:95:1b:47:e2:7a:04:eb:6d:62:
d1:3d:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:11 2025 by rpki-client