Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: slLapyIQy3nEX5jKhTARO+LRsEbaEd+V7ntWl/YhG5A=
Subject key identifier: 06:6A:7D:9B:30:DB:90:9D:71:3E:0A:A6:31:A7:BB:78:CB:56:81:5C
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 019935012FB1E1AB52E999D1B04F252A7541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 16F7
Signing time: Wed 10 Sep 2025 19:01:34 +0000
Manifest this update: Wed 10 Sep 2025 19:01:34 +0000
Manifest next update: Thu 11 Sep 2025 19:01:34 +0000
Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: i23/5D5Ofe6Ppt8Tb6wQJ9b6o9i61dlsynbNDc5d/xE=)
2: GBbfNR6d0u5nwBsF8xTrwEFTIJA.roa (hash: 2vUhSHXNQ0OXKzt5zGJFduk9dEZI6NIu6WWA5AgTXko=)
3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=)
4: wFQP_vODEY-W3eIkfxHByblOUq8.roa (hash: n1ZQqwSA0BtVLGIlganeJnOqb9x+AOjSB94Cm0wXocg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:2f:b1:e1:ab:52:e9:99:d1:b0:4f:25:2a:75:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Sep 10 19:01:34 2025 GMT
Not After : Sep 11 19:01:34 2025 GMT
Subject: CN=066a7d9b30db909d713e0aa631a7bb78cb56815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:c5:47:54:a6:94:00:04:4a:78:71:a7:74:
74:17:8a:02:81:f7:b3:3f:02:62:a3:30:d0:c9:54:
c6:7b:13:db:c5:67:c0:3f:b2:57:e2:71:1d:bc:08:
82:cb:21:8f:b3:aa:ad:b7:5b:50:01:5e:19:6b:2d:
d3:05:70:f0:f8:7f:57:d2:c5:16:dc:ee:60:c5:1c:
f4:83:71:2c:dc:e9:e1:55:35:4f:1b:82:74:66:5c:
ba:e0:69:dc:cf:c8:55:20:d2:13:7e:95:d6:56:bb:
35:46:3f:20:87:a2:55:ff:29:52:7e:77:64:df:97:
bb:77:dc:a1:98:f7:ff:e5:e9:29:89:da:d8:a1:c9:
d7:cf:e5:d4:6e:21:ff:e2:51:af:7f:a9:02:1d:85:
e0:f7:3b:a0:2d:5c:5e:d2:7a:e2:69:f8:0a:d3:e5:
ef:ad:ea:a9:4e:c1:2b:4b:e4:0d:0b:2f:36:a4:d4:
88:1c:36:d4:fb:14:68:ca:e3:f3:fa:8c:bf:32:6e:
fc:0d:8e:da:92:41:48:20:fa:2d:7d:f3:a7:f5:62:
af:cc:3b:b7:30:ab:16:ab:88:04:d9:9a:6f:79:fb:
97:01:b3:1a:9a:2d:6c:9a:c0:25:af:c8:0b:03:e8:
02:f6:85:d9:ba:9e:50:42:98:d1:bc:08:75:a2:62:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:7D:9B:30:DB:90:9D:71:3E:0A:A6:31:A7:BB:78:CB:56:81:5C
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:59:41:3a:f3:45:27:51:43:96:20:37:a2:27:dc:65:75:
eb:78:2d:b0:02:ee:51:55:24:23:fc:fc:f4:ca:8f:e7:1b:95:
fe:cc:e6:21:2e:7e:72:4e:ae:4a:cb:3b:5f:98:91:3f:2c:18:
31:5a:bb:e1:6f:8d:83:ee:90:6a:15:6b:04:b8:77:94:41:84:
27:37:b7:5a:47:d7:4b:ca:ed:82:b7:e7:f7:aa:12:8d:e3:1b:
9a:58:1f:47:d7:73:96:e2:16:38:a0:4f:bf:a2:ef:63:b7:ae:
e5:04:8c:10:d1:5d:a0:81:ff:28:3a:b7:10:42:71:83:1d:c8:
32:9f:87:f2:07:f1:3d:c5:ad:91:14:15:6e:84:d7:d5:34:31:
1c:8d:03:36:5a:18:18:3f:b5:9c:72:29:45:d8:23:0e:f4:cb:
3f:84:87:74:99:30:06:22:33:8d:af:c3:5c:89:f0:a0:13:fa:
c8:fc:04:4e:bb:e7:53:c0:ed:08:f6:be:31:ac:3a:4e:3c:d3:
44:9b:29:3f:e9:0e:71:76:14:8c:47:35:d3:1d:14:7a:6f:cc:
cc:6a:81:1d:8c:f2:29:c5:06:3c:9e:d4:bb:1e:4f:67:4c:35:
14:30:30:18:e0:7f:95:87:b4:16:c8:d4:d9:32:ba:05:18:91:
f8:a4:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:20:06 2025 by rpki-client