Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: E5DdS/HwbNhAiw4jR649+8TeXBrTU/gu9OwkprfT2dY=
Subject key identifier: 5F:68:A5:ED:35:A9:98:F7:EC:B7:5F:6D:E7:FC:49:28:DD:0D:DA:77
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 01992330DACF112C24D58758DAB1AF21E56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 101D
Signing time: Sun 07 Sep 2025 08:00:28 +0000
Manifest this update: Sun 07 Sep 2025 08:00:28 +0000
Manifest next update: Mon 08 Sep 2025 08:00:28 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: WhpOsMGk/jr1buoD27JNpc9U7OziZjX67mrH7pArXEc=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:da:cf:11:2c:24:d5:87:58:da:b1:af:21:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Sep 7 08:00:28 2025 GMT
Not After : Sep 8 08:00:28 2025 GMT
Subject: CN=5f68a5ed35a998f7ecb75f6de7fc4928dd0dda77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:fe:51:9c:43:e3:3a:b2:cc:36:84:43:e7:
af:af:36:20:d7:44:8a:ec:8e:fc:e7:72:2c:3f:92:
a2:73:71:37:43:63:13:f2:4a:af:15:1d:67:6a:29:
53:2b:d2:e6:ad:5d:72:16:de:e3:e9:3a:89:58:42:
89:0d:c6:d3:b1:b5:1c:6c:4a:a9:bc:1f:da:e0:1e:
22:28:fe:34:20:9e:56:f2:4b:65:fc:9a:37:4a:b2:
57:c7:ec:b9:4f:bf:6f:1b:64:81:8f:45:7c:5c:f5:
2b:b9:a1:4c:11:26:d5:18:d9:b6:fe:6b:ad:f4:5d:
80:af:83:33:fb:7f:3a:63:9a:1d:a8:10:a4:8d:9a:
f8:21:28:99:a6:4e:97:e3:64:e8:50:33:bd:68:ee:
1e:d6:b4:e8:f7:0d:6e:73:ab:2f:8b:69:e5:13:ca:
1b:cf:1e:c1:42:93:82:3b:9f:fc:6f:c5:2c:5b:4c:
c7:49:b0:66:73:be:2c:1e:cf:80:5f:3d:26:f5:c0:
83:e3:ea:71:97:7f:8d:c0:d3:7b:b5:96:61:5e:e9:
a7:3b:a7:43:97:b9:00:e4:e4:06:96:d8:0f:b1:92:
aa:a3:4a:42:4e:10:6d:6e:31:1b:2e:e3:38:52:cf:
3a:a9:be:74:6d:72:f0:db:9a:18:66:71:f1:5b:f9:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:A5:ED:35:A9:98:F7:EC:B7:5F:6D:E7:FC:49:28:DD:0D:DA:77
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:00:ca:be:c0:68:b3:ef:8d:8c:e0:c1:c0:e5:f6:83:6a:44:
8d:a2:42:2a:a8:6a:f5:15:d7:14:f8:e4:69:5f:cc:2b:53:16:
b1:07:c6:33:6b:c1:33:ac:d1:a9:ff:46:28:ef:c8:7e:47:99:
ea:70:10:8a:31:80:61:be:f3:21:0b:2e:05:ca:66:c6:6b:9d:
56:88:3e:03:be:16:70:44:b6:5a:88:e4:da:83:ca:71:0d:ca:
13:96:d2:63:0a:87:43:76:ad:30:28:e0:39:86:d8:59:ae:e5:
38:a4:57:ea:28:54:2e:57:6a:e6:00:b2:e9:09:b9:2e:08:85:
36:c1:ee:19:fb:d7:78:c5:10:c7:63:59:95:cb:30:d3:df:c1:
23:13:18:e9:af:90:0e:9c:dd:1c:78:cd:91:a2:f4:4e:26:e8:
f9:ad:06:81:06:9a:93:8c:21:9b:8f:b4:31:6b:6a:fa:cb:7d:
d8:ad:7d:61:86:45:df:e6:1d:46:b9:2c:b8:fd:23:d1:97:1b:
a5:4a:51:c2:b1:47:5a:0f:d6:04:90:d9:32:5e:48:4f:31:1e:
0e:dc:ca:78:9c:d4:cd:bb:92:dc:f1:71:a4:dd:37:ec:1f:a4:
1d:3f:30:13:5c:c1:b9:be:d3:e6:16:5f:84:74:7d:9f:6f:32:
23:cd:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:33 2025 by rpki-client