Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: Z1RGoExk+evpXuHk3qBX1qr060cK7pxPVbkCyUZCtu4=
Subject key identifier: C2:41:A8:EA:31:DB:BC:46:87:57:2A:04:5F:E6:88:38:03:F8:13:7C
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 0199345B55EB3BCCC2599FE849D79C374107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 16:00:24 +0000
Manifest this update: Wed 10 Sep 2025 16:00:24 +0000
Manifest next update: Thu 11 Sep 2025 16:00:24 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: 602nVwgY4ybxRAj46+jFVF4Sh1nlySjJDXGtP5w3JEE=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:55:eb:3b:cc:c2:59:9f:e8:49:d7:9c:37:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Sep 10 16:00:24 2025 GMT
Not After : Sep 11 16:00:24 2025 GMT
Subject: CN=c241a8ea31dbbc4687572a045fe6883803f8137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:fa:6e:74:36:dc:7c:ba:aa:f0:37:90:11:
1a:35:f5:80:a4:f8:cc:18:ea:34:90:6d:14:c3:ff:
e0:3e:22:8a:d2:b9:f8:58:22:84:f1:cb:68:6f:1a:
b3:1d:7c:d2:27:88:d4:0a:ed:c9:09:d3:e4:06:67:
8d:0f:26:9c:6a:0f:d2:1b:5c:cc:86:89:d0:7e:04:
a7:23:09:89:c2:79:35:1f:b5:83:bc:21:3f:ee:81:
c7:b0:e7:74:6e:87:d4:67:fc:56:fe:ef:6e:f4:38:
b3:cd:ca:30:cf:77:2d:c6:fd:5c:d8:b5:f5:c6:aa:
c3:3d:37:96:94:7e:fa:2f:f7:58:9d:1f:c2:36:79:
57:27:d4:0d:31:5f:0a:09:b7:52:b0:2e:20:6e:66:
4f:87:e9:64:fc:0d:54:c0:8a:9b:9e:a1:07:b0:ae:
54:54:43:c8:ec:38:48:21:01:24:16:91:e9:9a:ed:
c8:33:89:9c:0f:03:81:de:18:10:11:23:4d:da:24:
ce:f6:9a:1e:44:24:e0:98:be:07:d0:0b:3c:e5:11:
cb:2f:29:78:e7:5c:db:7d:61:46:30:59:f8:d1:66:
13:31:9b:d8:92:f9:80:47:d3:65:8f:0a:a7:4b:98:
7a:4d:6c:3c:74:41:24:7a:6f:57:8b:36:cd:9e:56:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:41:A8:EA:31:DB:BC:46:87:57:2A:04:5F:E6:88:38:03:F8:13:7C
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:4b:cb:cc:30:5c:bc:07:44:c5:fa:f7:c3:14:2f:15:33:
c1:ac:a9:b5:53:10:b6:00:c8:72:b4:60:96:88:b5:5a:0e:e7:
97:2a:ff:05:4f:73:74:91:52:e5:ca:5d:e7:b3:59:dd:5d:cb:
e0:61:a4:39:bf:af:a6:5f:44:70:ed:7e:bf:a3:73:c4:1b:2e:
56:99:e6:a4:68:cf:98:c5:d4:88:28:d2:ad:77:ee:e4:20:cb:
15:f0:5a:d9:07:31:6e:56:8c:09:71:f9:d2:fb:fd:75:64:b7:
6f:96:af:9d:5c:61:3e:cc:ff:be:e9:ff:c6:96:52:84:6d:6b:
8b:70:24:4f:73:52:c9:e8:20:77:8f:5a:93:e9:fa:9f:d2:de:
02:4e:19:9f:1c:22:40:9f:1b:f0:f9:68:6a:48:e0:29:15:52:
37:68:51:01:ce:c7:7c:7c:49:88:a5:37:dc:7c:88:a6:f8:2c:
a0:7c:4a:bc:6b:fb:a1:30:00:72:b8:c2:17:0f:db:06:8e:2a:
06:51:3b:fd:7e:c3:74:3f:a5:07:af:4c:29:2a:2f:c3:87:57:
65:77:31:d8:45:47:d4:4f:ef:27:18:81:21:06:14:a0:f1:f9:
ef:9c:03:35:9a:f9:a9:74:f1:ae:b1:a1:35:66:8a:19:54:50:
72:20:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:22:48 2025 by rpki-client