Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: IeOVFbUK5Goy+3gp5bEqcaCgIb2pqIi1PNjsHCDfLz0=
Subject key identifier: 18:86:9F:05:57:EA:32:A1:3C:DA:9F:D5:8D:48:76:A9:C8:CF:8F:48
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019947742B65B364E99216C6FB9CFD6F2FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1684
Signing time: Sun 14 Sep 2025 09:00:19 +0000
Manifest this update: Sun 14 Sep 2025 09:00:19 +0000
Manifest next update: Mon 15 Sep 2025 09:00:19 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: YuYCEnNeegv2L81RvWKKJPjI9QAPPANaBLS33cQVtLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:74:2b:65:b3:64:e9:92:16:c6:fb:9c:fd:6f:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Sep 14 09:00:19 2025 GMT
Not After : Sep 15 09:00:19 2025 GMT
Subject: CN=18869f0557ea32a13cda9fd58d4876a9c8cf8f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:17:e8:64:4b:a6:10:76:cc:b1:ba:d4:b6:
e3:2d:3d:dd:06:30:86:57:88:0c:85:f4:05:1c:c6:
61:e4:5c:9b:69:6d:43:b2:a4:75:11:bf:28:49:84:
4c:44:00:21:ca:9c:66:59:01:86:ea:1b:74:73:8c:
c6:ba:3e:14:9d:7c:cd:0c:12:73:7b:58:be:94:c0:
81:18:0e:6a:44:7e:92:00:e8:5f:5c:b4:fa:12:b4:
be:59:f0:a9:84:0b:88:e8:2c:b9:b6:7d:6d:bb:ea:
de:66:a7:11:37:b4:71:61:05:98:2f:2f:40:7b:94:
db:0f:f2:0e:96:a7:e9:83:2a:ae:b5:90:16:a3:de:
12:ce:95:37:d3:8e:28:d6:66:eb:d5:95:54:12:23:
3f:23:44:10:18:41:48:1a:12:c0:84:16:bc:6c:a7:
f8:42:5b:a5:b3:b7:34:ff:fe:5c:95:b6:c1:b0:8a:
a0:01:e8:af:6f:ea:e2:db:07:62:d3:22:54:4e:3e:
f9:aa:df:8c:15:08:14:27:79:dc:08:12:11:75:27:
15:8a:27:e8:03:ea:71:83:64:46:1d:54:ee:9b:5d:
c5:b5:1f:58:b3:6e:ec:9a:38:24:66:50:22:89:83:
8f:4c:1b:6c:2a:ca:9a:d7:51:23:c8:9c:00:d6:5d:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:9F:05:57:EA:32:A1:3C:DA:9F:D5:8D:48:76:A9:C8:CF:8F:48
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3c:c3:fb:51:79:01:38:c1:7d:2e:f6:fb:3b:74:2a:b6:2d:
bc:39:7e:3b:a7:c8:68:a7:0a:93:e3:8e:c6:b4:b5:63:3e:61:
71:08:76:fd:46:a6:5e:70:37:dd:f4:b5:59:73:7a:75:75:89:
1f:7d:5c:af:e1:ef:07:df:89:95:19:b4:3f:74:b9:42:86:aa:
d5:60:01:b1:35:5d:69:f4:88:72:14:df:80:2e:4a:98:55:89:
27:68:d3:20:ab:52:1f:af:03:14:89:e7:83:0c:b3:f3:4a:00:
7d:ef:b0:f2:4f:f1:75:4e:f9:0d:09:49:f4:b4:b8:d8:b8:7c:
f5:69:51:31:8b:ba:6a:5e:b9:8d:f1:d6:2e:6a:35:16:08:15:
21:e5:1f:fe:97:ab:2a:9a:da:69:e3:4c:55:7d:e8:4f:00:a6:
3f:9e:79:a1:af:54:c8:63:a1:d5:3c:8e:6c:fe:43:cd:dd:75:
15:2b:d9:fd:5f:48:f2:23:3a:eb:80:f0:2a:0c:e0:56:fd:19:
40:a0:09:c0:18:3d:49:08:37:20:4a:37:d3:ce:ca:66:98:4b:
0c:35:02:66:b8:c9:af:2d:44:17:e5:66:af:2b:f8:fc:f9:df:
d4:63:29:2a:0f:57:d8:ed:26:47:14:f9:6c:0b:f0:bb:b9:b3:
63:ff:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 10:50:00 2025 by rpki-client