Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: G4iq5SxJttiyk0WuSxTqcPodUTTnwuBCf7aD4poTUGY=
Subject key identifier: 02:E3:09:4B:3B:39:61:28:8C:F6:7E:9B:36:C8:72:FB:D2:91:16:F5
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 0199368124443DA1FB97F12A5A291097ACC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 050C
Signing time: Thu 11 Sep 2025 02:00:56 +0000
Manifest this update: Thu 11 Sep 2025 02:00:56 +0000
Manifest next update: Fri 12 Sep 2025 02:00:56 +0000
Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: GkR5sHNl26OGcWA3my/AIZluqkxpjueKE7U2FUyMhYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:24:44:3d:a1:fb:97:f1:2a:5a:29:10:97:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Sep 11 02:00:56 2025 GMT
Not After : Sep 12 02:00:56 2025 GMT
Subject: CN=02e3094b3b3961288cf67e9b36c872fbd29116f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:98:7f:33:78:51:47:65:eb:81:9a:f1:e3:
65:c4:62:60:db:ad:e3:a4:fc:0c:7b:c0:f2:54:22:
12:be:4c:cb:22:87:30:9c:08:14:5e:ce:d6:95:3d:
05:6a:0c:19:d5:d0:b8:7e:d6:cf:5d:45:52:24:05:
98:73:7f:7c:1a:83:d2:7a:b1:12:00:a0:9a:73:9a:
4e:f4:dd:89:1a:54:c7:c9:a9:6f:8e:b6:6b:d8:3d:
ad:7e:7f:cd:90:a3:85:06:de:31:a0:cd:35:7b:d3:
51:45:e5:3f:da:21:f9:dd:65:3e:86:b9:15:65:ac:
35:95:85:b3:8d:84:f1:08:08:73:9b:29:df:25:58:
bd:9e:64:97:6b:56:93:4b:f6:cd:f0:2d:2d:62:8a:
8f:50:23:f9:ac:52:6d:aa:9e:7c:a2:ab:c3:ee:39:
a7:b4:b5:7e:de:8c:a2:8d:2d:3e:b0:4e:e0:13:b4:
9e:f0:61:45:ca:d8:27:e4:6e:ba:df:2b:eb:53:b3:
11:a6:41:f5:b5:49:05:86:cc:d6:ce:64:06:14:10:
1c:dc:a2:9a:ac:61:a9:8f:4e:fb:20:ab:05:6e:8e:
42:2c:3d:56:f6:e7:60:bf:4f:dd:38:2c:7b:d4:ea:
07:61:ed:f1:44:75:75:9a:e6:e7:58:cf:97:a4:cf:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:09:4B:3B:39:61:28:8C:F6:7E:9B:36:C8:72:FB:D2:91:16:F5
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:12:ca:39:e8:a9:e3:0f:ad:c7:e0:02:4d:86:b2:1b:5e:
6f:57:43:da:22:5c:c5:8a:f9:63:86:71:8a:03:09:d6:eb:d5:
5e:0c:0c:f0:a9:1d:2f:b9:f4:f6:ba:0e:58:04:23:f2:99:7d:
f7:e3:0d:5f:af:1b:3a:d6:0f:3e:db:0f:cc:a4:89:d0:fa:21:
b7:48:aa:12:c6:45:ea:61:fd:de:c2:4e:a0:e7:7f:f7:5d:d2:
32:dd:4d:4d:dd:4d:36:a8:41:49:54:3a:0f:74:90:a4:f1:6b:
93:3d:17:bf:f3:fb:83:49:23:d1:dd:88:4a:63:77:b4:15:82:
b7:0a:95:9b:58:e0:d1:4f:6f:26:24:2e:e0:91:36:e6:20:25:
93:45:b9:5c:ab:f6:48:70:69:56:46:a6:79:d4:dc:b7:c0:44:
bc:ce:57:aa:61:a1:9c:76:c2:0f:71:af:d3:6d:f4:30:1f:52:
bb:6d:34:9f:77:c9:d2:35:41:54:24:ce:f6:90:be:aa:80:ad:
0a:b9:a8:e4:fa:a6:6f:d5:61:a0:0b:54:31:e0:16:0f:92:90:
92:38:43:3b:b9:55:8a:3c:90:f5:05:b0:be:d2:e2:75:fe:65:
73:b9:cb:0a:17:7f:14:54:5f:09:6b:48:fe:14:68:a3:ee:15:
37:4c:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:56:52 2025 by rpki-client