Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: LHfUkbpzO/pSTtrsbpzQ1lQcp4AyfyhM8qIgnN17Bc0=
Subject key identifier: 85:11:5C:EE:8E:74:AF:DF:A6:C6:49:BE:AB:FF:40:22:0F:3F:3A:00
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 01992444167CEAF186F6B8E3BE6967C5893E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 1614
Signing time: Sun 07 Sep 2025 13:01:05 +0000
Manifest this update: Sun 07 Sep 2025 13:01:05 +0000
Manifest next update: Mon 08 Sep 2025 13:01:05 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: p/dkN3U2SnS6tu0YPPLZwJE5lSd8h7Qz9D7H1qW23Xs=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:16:7c:ea:f1:86:f6:b8:e3:be:69:67:c5:89:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Sep 7 13:01:05 2025 GMT
Not After : Sep 8 13:01:05 2025 GMT
Subject: CN=85115cee8e74afdfa6c649beabff40220f3f3a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:69:b3:52:57:74:24:06:7c:b0:01:d8:ee:
bc:fb:5d:d0:5c:c9:5d:b1:85:f9:be:ac:3c:32:f2:
cb:bb:d3:da:66:a2:68:28:d5:a9:26:f2:5c:1b:0a:
40:77:96:24:eb:e1:9c:ed:d0:54:76:3c:c2:14:fd:
e1:72:af:37:4b:d8:14:5b:e3:42:60:99:8f:45:d6:
b2:ae:1b:f0:a6:5f:ec:f2:d7:48:56:ed:b4:f5:22:
1a:5c:cb:03:d6:99:99:eb:2a:b6:f6:3b:c6:dd:56:
97:93:ae:c7:e9:d1:3f:64:30:80:5b:62:b1:34:21:
3f:91:fe:45:c5:db:7b:36:2f:96:fe:c9:93:3c:c9:
08:ab:92:e5:85:c1:c5:5a:91:6b:39:65:6f:74:e3:
52:5f:b0:87:5f:84:35:2e:bc:38:68:7e:8a:25:f0:
ce:b9:b3:5d:2a:98:b3:e4:11:2b:4e:c9:f9:59:77:
7a:2a:8e:1f:25:2b:19:1e:df:74:03:d2:d5:77:74:
d7:a6:c7:58:a0:2c:42:59:fb:ac:1c:14:23:fc:51:
ca:4c:96:88:67:3a:6c:c4:6c:b8:80:54:0e:3a:e6:
4f:53:da:e0:a9:cb:4f:c8:5d:5a:c4:21:29:eb:b8:
8e:31:bf:51:88:24:14:e9:8b:3f:ce:65:d3:10:c5:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:5C:EE:8E:74:AF:DF:A6:C6:49:BE:AB:FF:40:22:0F:3F:3A:00
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:cb:7b:c8:77:5d:a1:e8:47:54:c1:43:bd:de:d0:67:1d:
c0:e1:c0:2f:fe:3b:d0:31:44:a4:c8:8f:22:8b:9a:6d:db:a8:
eb:6d:cb:56:85:1f:eb:a9:00:51:0a:94:b7:ec:b2:59:86:0c:
80:5d:cf:c4:07:55:02:8a:07:02:8f:58:67:f5:63:95:ba:9e:
3e:eb:ad:66:ed:73:2c:fa:1f:93:3b:03:48:15:e8:c8:92:63:
cd:75:ae:f7:1f:24:87:0e:a2:23:9b:cb:f2:a2:b2:33:d1:20:
67:08:a7:f5:c9:25:09:e0:06:68:05:1e:7c:ab:65:c8:d9:9c:
3d:e8:25:68:bc:be:51:ed:e1:0c:dc:ef:2d:2f:aa:d9:f7:c1:
01:b9:5f:85:c4:eb:91:15:b2:84:76:91:00:28:d8:26:7a:ed:
01:95:ff:79:13:b1:21:6d:ef:17:b5:fc:c1:ff:bd:e5:a8:eb:
54:4d:a9:30:f4:b7:94:6b:4e:55:ac:44:82:5b:4a:19:da:fd:
46:16:31:e2:54:c0:e8:ce:82:12:05:f4:40:fc:55:93:d6:cf:
aa:40:ac:82:cb:ec:c6:40:aa:90:66:f8:1a:19:12:bc:23:f3:
35:9c:37:d6:35:27:18:72:25:df:71:e8:5e:c5:01:18:ed:8b:
ed:6c:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:40 2025 by rpki-client