Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: fyhRP6oHtWLDa5t/RkvLr4GmhgEOwIIw0qRdTh63LiU=
Subject key identifier: E2:B2:B9:7D:1F:D4:D1:72:C3:85:01:2B:31:82:4B:6C:2A:C3:AC:5D
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019921B1E4D1F3FAC84C9E83993E952CFB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1302
Signing time: Sun 07 Sep 2025 01:02:10 +0000
Manifest this update: Sun 07 Sep 2025 01:02:10 +0000
Manifest next update: Mon 08 Sep 2025 01:02:10 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: sv0NdFKlUxYH2x1WckhozHTN0vfXvl2QZZe00Xbf0a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:e4:d1:f3:fa:c8:4c:9e:83:99:3e:95:2c:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Sep 7 01:02:10 2025 GMT
Not After : Sep 8 01:02:10 2025 GMT
Subject: CN=e2b2b97d1fd4d172c385012b31824b6c2ac3ac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:30:0e:b6:05:d6:1b:e3:eb:0b:2a:53:eb:
03:d8:dc:63:b7:95:59:94:5f:c5:71:80:4e:99:0c:
3c:16:89:96:9f:ec:67:3c:db:3e:08:5a:35:df:4e:
12:08:c8:48:04:b4:2c:d9:1e:5d:20:46:2a:a5:ee:
b4:8c:8c:a0:ef:f3:1d:11:50:74:dd:59:e7:2f:84:
b9:e4:7d:2b:6e:e6:a0:35:43:14:84:5e:4a:d7:5e:
25:d3:b4:51:85:f9:08:56:d1:45:03:69:89:b4:34:
50:d1:25:98:02:52:02:aa:0d:1d:e5:f6:60:05:05:
22:37:3f:01:8b:6c:ef:84:08:e1:31:aa:74:de:88:
2b:4d:c5:3c:60:38:27:6e:d7:c8:9b:37:ba:e4:14:
16:8b:e0:d7:68:8b:7b:89:63:db:10:50:6d:7b:4b:
85:b9:95:02:83:d1:03:a3:50:52:28:55:df:bb:1d:
d6:a7:e4:d9:63:34:e4:e5:c8:e9:43:ec:49:5a:c1:
d7:fc:23:c5:b2:06:22:28:04:7c:4b:31:29:b3:70:
6c:a6:fc:28:37:23:5a:a5:3d:fa:ab:6b:cb:60:2c:
db:4d:ab:41:1a:93:3b:6e:9a:b7:71:bd:0d:53:57:
60:cb:33:bd:0d:cd:36:43:2a:1d:37:84:1c:d8:2f:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:B9:7D:1F:D4:D1:72:C3:85:01:2B:31:82:4B:6C:2A:C3:AC:5D
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4f:4a:d4:88:8c:43:84:d3:37:b9:db:ce:74:37:c2:6f:2b:
8f:82:b3:9b:5a:14:10:25:c8:ce:a1:1d:eb:1a:53:e1:dd:8d:
42:cb:c4:16:a6:b4:8d:fe:50:0f:73:4b:67:00:e4:24:c6:ff:
b0:3d:1a:59:dd:08:1a:5f:6b:2d:4d:6d:a9:c0:7f:c7:04:4b:
3d:c7:49:d5:29:f4:4f:7d:60:4d:b6:0f:78:64:fc:0a:ea:13:
f7:99:10:ef:4f:4c:ee:1b:a4:6b:9c:3e:ca:57:d9:89:9f:17:
9c:2a:90:ae:d9:36:5c:14:82:e0:73:52:fa:85:a6:f0:3d:14:
f1:62:7b:81:18:98:fc:d8:92:c8:18:e9:75:e8:ee:9d:9f:7c:
8e:3e:c6:c0:82:0d:b9:37:d0:69:5b:0d:0e:d0:26:2f:11:34:
23:79:12:b8:d6:3f:34:f8:5c:87:20:94:84:4f:b2:c4:5c:4d:
92:35:69:90:04:a8:86:54:05:54:70:94:53:2d:31:9b:be:01:
96:46:cc:9d:d6:00:f1:6a:0b:a5:31:eb:b0:a0:63:2f:91:1b:
8a:cf:1a:51:de:66:a4:a6:fa:95:5c:6c:95:2b:fc:a6:56:1a:
2a:1d:98:d8:e4:a5:c1:24:42:9b:fb:45:b6:95:2e:c0:71:a5:
04:e5:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:46 2025 by rpki-client