Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier: 6dare8qQWiZHbcbYUrxFBrO5V3Z0/T47t4bctPgJY/U=
Subject key identifier: 95:2A:FD:22:EF:1C:88:4B:6C:90:F8:B5:93:C2:28:8C:D4:61:8C:D9
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer: /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial: 019922C35EE14D0AC5C3F0A5554E9F061EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number: 04A9
Signing time: Sun 07 Sep 2025 06:00:53 +0000
Manifest this update: Sun 07 Sep 2025 06:00:53 +0000
Manifest next update: Mon 08 Sep 2025 06:00:53 +0000
Files and hashes: 1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: lPOt9shuGmxoQWK14o30x5SIznlT8RcsygX3bj76u3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5e:e1:4d:0a:c5:c3:f0:a5:55:4e:9f:06:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
Validity
Not Before: Sep 7 06:00:53 2025 GMT
Not After : Sep 8 06:00:53 2025 GMT
Subject: CN=952afd22ef1c884b6c90f8b593c2288cd4618cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:f9:c9:f3:00:77:26:94:ca:3b:99:49:f5:
7b:f0:dc:db:e0:cc:39:d6:2a:29:f6:49:74:81:7c:
98:57:c0:df:f5:eb:a6:d9:c5:e2:91:b1:44:b5:84:
fe:4d:9e:4a:b8:5d:f4:f8:5c:16:1d:11:c8:1e:6b:
57:31:7a:38:8f:6b:22:1b:e6:65:9e:03:50:ad:76:
e0:77:74:07:fd:53:53:bb:b5:8a:f5:93:50:f0:aa:
38:0e:58:5b:16:03:86:3b:a0:2d:a7:45:9a:e3:23:
5a:02:87:b5:61:8a:0f:24:0c:fc:61:de:4f:96:4f:
65:1b:29:f5:df:f5:df:54:ee:73:21:46:ed:03:90:
58:d2:b7:b9:15:e3:55:21:f0:57:d7:57:e7:55:03:
de:2d:a1:7f:93:17:da:46:36:fa:ce:4b:07:7b:57:
48:5f:40:d0:0e:8a:32:87:01:c1:8d:5f:3f:22:b8:
27:b3:61:44:eb:86:15:f3:41:6d:42:2c:0e:a4:b6:
f4:31:b8:56:de:5a:61:94:21:67:e5:99:56:d6:d0:
b9:24:cf:16:47:ea:46:ab:3d:cc:1b:a2:57:90:ef:
2e:f6:c4:81:a5:d2:c2:55:91:41:29:07:83:82:f4:
d1:4d:b1:e4:93:d6:15:d6:d5:d3:3d:1f:e8:b7:62:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:FD:22:EF:1C:88:4B:6C:90:F8:B5:93:C2:28:8C:D4:61:8C:D9
X509v3 Authority Key Identifier:
keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:30:d9:e8:98:1b:49:d6:44:b1:fd:df:a2:cb:c7:ee:62:
f2:51:93:9a:62:9d:a5:80:a3:d8:f0:e5:57:42:eb:10:7e:b7:
ae:dc:90:06:5c:c4:02:00:bf:66:ab:80:8c:63:d4:dc:d4:a3:
81:cb:f4:d4:fe:e5:03:9a:6a:07:b2:0c:ae:a8:ec:98:41:05:
d9:b2:9d:01:2b:32:88:e4:e2:f9:85:b2:87:4a:8e:88:91:ef:
cd:00:b2:3d:fb:5c:f3:2b:75:1a:76:fb:c9:20:5a:2b:ed:66:
d7:e6:19:5f:d6:d1:8f:b4:41:49:99:6c:12:9e:95:d0:6c:f7:
1e:16:0f:1b:4b:98:40:cd:50:09:a0:83:17:2d:40:0f:6c:72:
62:42:60:53:ba:48:37:87:c0:e6:a6:96:c5:69:4c:b8:4e:1b:
43:91:21:cc:12:61:8d:62:28:64:89:90:df:14:2d:4f:fc:be:
e2:79:b4:4c:7e:02:97:4b:3b:ce:4b:23:5a:94:9c:06:7f:e2:
56:2a:87:97:e5:a2:98:6b:cb:71:bd:fa:e2:13:62:c3:cb:10:
5b:d3:02:84:32:42:a5:1f:3d:24:f6:97:c5:1b:33:8a:26:af:
d1:eb:f7:f2:d9:d2:bd:fc:82:6a:c0:b2:40:b1:53:37:1a:89:
0b:03:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:03 2025 by rpki-client