Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: OnA5xN72gqyb/bSy17mnxBaT6wN34Vx1tQN21QywRK0=
Subject key identifier: FD:5A:80:52:DE:D6:E0:70:5A:8B:4A:CE:95:2C:45:A8:6D:7C:B5:80
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 0199228C52F4BF249294F12A366F525B7F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 1520
Signing time: Sun 07 Sep 2025 05:00:45 +0000
Manifest this update: Sun 07 Sep 2025 05:00:45 +0000
Manifest next update: Mon 08 Sep 2025 05:00:45 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: Fd6TtJZ1ai0Xjlr+an8llDPhM8vCKmzJSmFpYrSanTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:52:f4:bf:24:92:94:f1:2a:36:6f:52:5b:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Sep 7 05:00:45 2025 GMT
Not After : Sep 8 05:00:45 2025 GMT
Subject: CN=fd5a8052ded6e0705a8b4ace952c45a86d7cb580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:30:9d:44:a9:db:9b:a9:85:6c:56:3f:11:
bf:43:69:64:29:74:76:bf:e6:3b:00:cf:ea:eb:8c:
7e:57:9d:36:1c:83:54:33:69:94:6b:75:cf:03:a1:
99:18:ef:84:d1:5d:ff:e4:25:70:af:a7:3f:5a:2c:
f2:ef:76:fe:bf:5c:27:4b:5e:55:d4:03:6b:78:5c:
2d:7e:96:88:64:54:73:8e:63:86:42:2a:ba:2d:5b:
66:b6:0f:4c:c0:f3:4a:2a:27:0d:79:3d:5a:aa:21:
58:fa:10:99:ea:07:12:85:d6:47:6b:d4:cb:10:eb:
b1:46:2d:bf:3e:46:3f:f1:db:a3:e8:0d:3d:1a:33:
01:94:99:fa:14:81:4e:5e:23:81:8d:a9:44:80:cf:
8a:90:4c:d5:83:9a:b4:31:95:44:61:ec:db:c5:43:
ed:7d:1c:a2:2b:83:31:f6:11:f5:04:98:26:5d:d7:
9c:d1:ef:32:f2:47:64:c6:37:39:53:87:c3:3f:41:
22:86:cb:4a:38:7c:26:24:ea:7a:e6:a5:0a:d7:89:
93:c5:c4:e5:b9:91:7a:ab:1f:27:ae:8a:79:34:d2:
a0:d3:e2:a2:51:93:ee:ff:b2:2c:96:8a:90:eb:10:
9e:5c:be:de:df:c5:55:cb:aa:61:fb:27:29:82:02:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:80:52:DE:D6:E0:70:5A:8B:4A:CE:95:2C:45:A8:6D:7C:B5:80
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:45:8e:25:af:78:34:d0:bc:1d:68:3a:03:99:b3:9e:62:
cf:5d:f7:e1:30:02:53:df:0c:4d:63:43:da:c7:5c:0e:fe:d3:
ef:4d:6b:fc:05:9a:63:12:f1:18:a4:24:e1:89:da:6a:75:d4:
c1:91:42:3f:38:fc:4b:cd:43:56:e0:c0:8e:2e:2d:f6:e4:fb:
04:9e:94:4d:ba:63:ff:35:21:6d:ae:ac:22:5b:e8:28:59:6c:
81:73:ad:2a:6f:fc:c2:e2:c4:bf:82:c8:d0:93:87:fc:dc:2a:
f2:32:33:f4:b7:e6:f0:b7:13:d1:5a:15:cf:9d:d7:64:a1:b6:
00:a2:23:d3:73:cf:52:f0:db:dc:ed:a9:32:99:26:b9:68:39:
f5:2c:67:42:0d:67:41:8b:8d:a3:07:7c:1f:b8:09:da:d6:6d:
e8:dc:19:a4:ea:30:d8:9d:a2:b0:19:f5:ec:c7:2c:5a:18:7c:
76:ba:3a:9b:66:2e:8a:53:ff:fc:65:b5:e5:0a:e7:c2:af:21:
65:b8:47:3e:e9:35:5c:9d:78:32:86:be:46:a5:c5:62:d3:a6:
41:2b:72:ec:b3:65:70:f8:f7:ee:d4:05:9b:8c:f2:fe:b8:7e:
a3:67:0e:eb:b9:bc:bd:92:2f:7c:12:3d:bb:71:59:be:9c:e6:
02:1f:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:30 2025 by rpki-client