Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: SFLbrZOFG7MQ9JAf+/x+DVDpD4LcriG+oLSTQaJHrnM=
Subject key identifier: 80:B9:6E:EE:BB:F6:76:0E:1A:42:13:78:25:C0:A4:34:28:A8:73:1D
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019927E94BFDAEE0BCE57D265675D60CF691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 06:00:24 +0000
Manifest this update: Mon 08 Sep 2025 06:00:24 +0000
Manifest next update: Tue 09 Sep 2025 06:00:24 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: mWd6R574WyEqEPcUSwBpliy3+BBMt06cFFrwNuZtk8g=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:4b:fd:ae:e0:bc:e5:7d:26:56:75:d6:0c:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Sep 8 06:00:24 2025 GMT
Not After : Sep 9 06:00:24 2025 GMT
Subject: CN=80b96eeebbf6760e1a42137825c0a43428a8731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:2a:4b:32:36:b5:b7:44:2f:d6:80:ab:34:
d2:24:0a:4c:93:b9:23:09:36:e5:15:9d:61:70:3c:
f0:77:f7:14:5b:1a:61:96:42:e0:0e:00:eb:b3:07:
45:8e:90:10:da:88:cd:db:53:9b:70:34:c5:02:17:
7e:e9:a1:30:3e:fa:29:e5:61:cc:f1:d2:fd:8e:49:
f3:2c:1b:e1:28:fa:bd:56:23:72:5e:a5:34:a6:03:
d0:02:31:d5:01:4e:1f:60:75:cb:67:b1:ad:2a:80:
6a:58:8a:97:15:f5:32:75:48:dd:a9:71:44:b9:87:
bf:f3:58:4c:d7:53:75:31:e9:6c:7e:1a:79:d7:cf:
ee:6e:26:6a:5d:da:08:b8:f8:2f:f9:eb:58:b4:89:
1a:1a:af:ac:38:ff:18:a4:8b:8e:05:8d:85:78:8f:
c5:d7:fe:44:51:a1:8c:82:67:2a:e8:3a:cb:cc:60:
be:d3:6a:1b:77:6f:0a:07:9f:82:c7:47:47:56:35:
6f:94:64:b4:bc:59:b6:83:6d:41:4b:db:15:0a:75:
4b:af:93:ee:6b:77:f4:d7:33:07:95:de:d9:fa:37:
0c:d5:2e:b5:1f:e9:53:d3:55:74:b7:76:4e:23:04:
c6:67:61:25:2e:d8:a0:16:54:99:1e:fd:71:b5:0c:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:6E:EE:BB:F6:76:0E:1A:42:13:78:25:C0:A4:34:28:A8:73:1D
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:09:e0:c0:c2:f9:9b:e2:7e:c2:bb:56:ac:1d:53:ed:e9:
89:ea:e3:55:e0:49:01:73:25:55:aa:ba:6a:93:af:c3:41:8b:
a4:56:21:6f:1c:e6:a1:ce:aa:20:68:20:55:19:eb:b9:76:fe:
db:55:ae:13:b1:72:3c:3b:32:1d:f0:e2:94:e3:a3:a0:f7:be:
15:73:8b:98:dc:80:13:d2:7e:cd:e0:67:5c:b6:7a:38:fd:b0:
5e:d1:76:be:3c:89:7e:50:00:49:d8:3b:74:44:4f:90:35:c9:
d8:d4:2d:6b:2e:50:68:fb:9d:11:4e:4f:de:96:e8:0e:c9:11:
24:9e:cf:38:af:0f:45:79:fd:fa:0e:33:6d:a9:48:4a:27:50:
ae:7a:56:ce:ae:2a:14:0e:dd:c5:5c:7d:e5:80:38:43:d2:d5:
78:2c:90:f7:4e:b0:de:73:03:4b:87:69:81:49:d4:76:9e:31:
dc:02:e1:de:7e:8c:59:47:0e:49:4a:64:3a:b7:59:fe:0e:76:
73:ef:75:97:4d:0d:73:96:0e:f4:f3:05:9f:42:51:5c:a1:0a:
1b:a5:45:38:f3:75:35:d6:1c:74:c5:59:24:88:e6:7c:c4:e5:
97:68:8b:57:39:99:19:eb:4f:32:24:ce:16:90:8f:1d:56:c4:
e3:33:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:09:27 2025 by rpki-client