Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: 1DyboW0i281WJaMZH/re+YoCk3dbTdhGEfEYC0qgGqQ=
Subject key identifier: 72:5C:34:C4:84:85:DB:A3:8F:D6:59:7C:BC:AC:5B:C0:97:C4:51:8E
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 0199172D236BF39F2A914DAA956BDDCB1D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 10DC
Signing time: Fri 05 Sep 2025 00:00:57 +0000
Manifest this update: Fri 05 Sep 2025 00:00:57 +0000
Manifest next update: Sat 06 Sep 2025 00:00:57 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: SNU2BX2S0BtvV0k4nUgnG/jT0/m72FkCo5s3sCRnwfU=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:23:6b:f3:9f:2a:91:4d:aa:95:6b:dd:cb:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Sep 5 00:00:57 2025 GMT
Not After : Sep 6 00:00:57 2025 GMT
Subject: CN=725c34c48485dba38fd6597cbcac5bc097c4518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2a:c3:f9:af:13:a2:d7:94:7f:e1:e5:d8:5d:
8b:a2:d3:f8:7b:0c:0d:a1:b6:20:01:a3:b8:7c:bb:
51:ba:ff:13:dc:63:89:e0:13:a6:37:92:08:ec:c8:
0a:f2:1f:42:5b:1b:c9:ec:e9:57:37:54:92:83:a7:
df:6a:19:e3:d3:e0:7a:55:df:67:ad:e1:cd:c0:ef:
06:25:41:1e:fe:f6:28:53:d6:12:99:a1:ec:75:b0:
6b:67:12:3a:e4:8c:cd:c5:f2:79:6c:8f:d9:14:11:
2f:8b:0b:53:f3:75:5b:9c:84:1c:51:cf:3c:e7:1b:
40:f1:24:5f:3f:82:04:9b:86:05:1e:40:28:68:b6:
15:c8:6d:9d:4c:98:46:eb:f7:9c:31:a3:4f:b8:65:
12:36:c9:2e:25:e9:19:cb:18:53:97:9e:21:1d:3a:
51:12:d6:04:1b:b7:3d:9c:bb:d3:4e:c7:9d:df:81:
aa:4d:1a:bd:37:36:84:b7:c4:10:67:97:50:af:c6:
76:20:a4:dd:cc:e5:c5:ec:e8:42:f4:e0:7b:06:7d:
29:03:a9:5b:be:e0:a1:f3:2a:07:b9:f5:54:e5:5b:
0f:ab:54:23:8a:4a:17:75:87:7f:f0:6d:1b:0e:2f:
a0:c1:87:a0:8e:8f:18:f7:f8:72:48:15:c4:42:09:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:34:C4:84:85:DB:A3:8F:D6:59:7C:BC:AC:5B:C0:97:C4:51:8E
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:85:15:8f:25:11:14:1b:a2:fa:38:16:68:2f:04:be:31:
d9:7c:91:c0:dd:66:9a:fa:98:2d:25:18:d0:4a:19:54:a8:10:
ae:05:97:08:27:c9:17:44:e0:97:8f:49:25:61:35:cb:f4:1a:
bd:da:52:2b:c9:3d:bb:17:e4:f1:c8:a7:66:76:c4:6c:22:71:
c3:36:5a:78:2a:3c:61:5e:48:a4:63:35:c0:f2:b2:5d:07:3a:
3d:51:80:30:f7:d7:60:1d:42:9d:a1:1c:12:ae:60:3c:84:cc:
65:60:bd:9a:8c:31:c8:34:a3:e5:08:b8:1a:77:00:03:2c:c7:
9b:38:a9:26:c3:10:0f:7b:07:80:14:7e:7d:f9:fb:74:1a:40:
1b:2a:2d:fd:6b:a6:73:91:bd:2d:fc:71:52:a4:7d:42:1e:57:
63:c4:d4:f8:a0:09:3b:de:3e:69:7a:fa:c4:af:ac:49:20:50:
71:ff:62:59:46:1f:c8:38:89:4a:8a:79:22:22:e0:2c:ce:12:
97:57:87:e0:c2:3f:bb:18:08:a7:48:e3:4f:0f:22:39:fd:8a:
70:6c:8c:a3:c3:63:61:a3:43:b4:37:8e:8f:1c:08:44:f3:ea:
31:f5:8a:13:fc:3d:b8:4d:4e:6d:4c:64:2e:d3:11:29:25:76:
e4:b5:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:54 2025 by rpki-client