Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: f2DLEA0wk/F1ccM+XLh/UkMiqb7JXQesQKioxHl+USU=
Subject key identifier: 5E:55:B5:A9:BE:B7:A7:A6:A9:98:49:91:43:CD:FC:B0:3D:57:2C:AE
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01984B53ED0B51200E9503141F5A6B05AFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0E9A
Signing time: Sun 27 Jul 2025 10:00:48 +0000
Manifest this update: Sun 27 Jul 2025 10:00:48 +0000
Manifest next update: Mon 28 Jul 2025 10:00:48 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: eCg0wAYAsz49WgnZj4RgZ/fa+DVXof4sHMD/GWgVBYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:ed:0b:51:20:0e:95:03:14:1f:5a:6b:05:af:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jul 27 10:00:48 2025 GMT
Not After : Jul 28 10:00:48 2025 GMT
Subject: CN=5e55b5a9beb7a7a6a998499143cdfcb03d572cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:97:3b:1d:1e:79:8e:a3:c2:42:91:8c:58:
09:7d:35:ad:cc:52:12:45:b4:74:e9:4a:f6:c4:72:
5d:b8:b6:cf:e4:a3:2e:b3:26:a5:c8:dc:7f:e6:67:
78:6c:dd:32:e5:c7:12:c1:37:6a:ad:2d:16:f9:f9:
f6:e8:1b:23:e9:d4:ed:8b:07:24:81:56:a6:86:e8:
8b:1e:a2:92:48:9c:f2:73:d3:66:88:86:d0:f7:e1:
66:bf:eb:be:df:59:93:1c:9d:da:5b:0e:36:6a:9a:
b5:ae:63:ae:3a:00:f2:e4:62:d3:0e:4e:73:02:f0:
e3:b7:84:57:56:fc:8a:76:0c:38:b2:25:f4:0b:1d:
29:55:f7:54:23:ea:ed:21:c9:38:b7:61:32:9b:55:
8f:86:a6:3a:4f:5a:83:ea:3f:64:52:3d:28:e4:a2:
13:a1:71:27:ac:e1:5b:ce:b3:a3:ea:c0:0d:19:42:
40:55:1f:32:5a:75:64:c9:95:16:ac:99:8c:81:aa:
d7:19:2b:20:88:32:55:cd:f9:b2:92:52:69:bb:60:
01:7c:45:00:6b:5a:eb:cd:0f:48:f6:42:9e:8e:67:
fd:a7:6c:85:7b:f9:6b:1d:f7:1f:bc:3d:cd:56:f6:
53:54:f5:ac:25:c9:fa:30:80:8e:24:b2:0b:81:9a:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:B5:A9:BE:B7:A7:A6:A9:98:49:91:43:CD:FC:B0:3D:57:2C:AE
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:72:9a:72:62:6d:8c:ea:83:ad:5a:01:bf:d4:0a:42:08:
0f:cc:41:16:58:ab:3d:83:bb:18:75:95:8c:8e:c1:82:66:69:
48:86:9b:ab:d4:e0:37:77:32:d1:ec:73:2c:c9:2a:42:b2:c3:
a5:c9:a5:21:c4:8d:c7:af:8c:af:75:8c:4b:d6:0a:a6:f0:43:
75:bd:a7:fc:c9:c6:17:09:83:ac:d6:22:70:f0:b1:e0:87:4d:
b5:b6:e3:03:5a:63:81:a1:97:f3:e2:73:a2:fb:18:82:b9:f6:
6a:c3:db:ae:78:43:33:48:de:ed:59:b9:7a:06:3e:82:dd:bd:
77:55:12:aa:17:3e:16:14:72:a8:bb:af:f2:f1:0c:97:b0:8c:
7d:47:73:bc:9a:d1:6f:a4:ff:38:09:11:c0:91:92:50:06:5c:
ea:2d:75:c4:50:91:ed:6f:d5:1d:a0:c2:ee:a3:54:41:13:ad:
1d:bf:d1:25:14:e8:b9:44:93:b9:00:be:d3:64:42:8a:64:ff:
c9:33:ff:0b:09:97:a9:26:3a:0d:0c:40:f7:74:53:43:2e:44:
95:41:bc:0d:35:24:b9:8e:fe:40:35:c2:dc:4e:8b:6c:9a:be:
8f:77:65:99:5b:b3:9f:6d:54:a0:0f:40:65:b1:06:1d:e9:30:
64:b8:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:45:03 2025 by rpki-client