
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: ex92p7BBNwWMrFaJQs3vaA1pPNQxHr3ATT8LAG+WLyA=
Subject key identifier: A2:B3:93:84:1D:3A:6D:FC:32:49:88:1C:27:ED:48:1F:E1:F9:A9:8B
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 0199221E44606A9BF584468BD5FF41D63E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 0927
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: 2+MLbeiBJqpsHWvYWiyBlOF8sy/u11MFnVkW6rE6hgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:44:60:6a:9b:f5:84:46:8b:d5:ff:41:d6:3e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=a2b393841d3a6dfc3249881c27ed481fe1f9a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:c2:29:df:fa:f7:e6:be:ff:4d:3c:e1:29:
bd:f7:58:ac:ec:90:39:37:51:90:70:c4:14:fe:1c:
5c:c4:ad:66:34:11:bf:fc:0f:ef:8b:d6:7b:03:d2:
2d:11:78:bc:99:05:75:21:82:96:7d:02:f5:58:5d:
05:01:98:76:c2:49:51:78:42:4c:4c:98:65:8a:6d:
63:39:37:fb:6e:a4:ec:ff:0c:49:07:c1:55:34:7f:
30:8b:e7:1f:0d:cc:23:38:13:ce:a1:e0:95:64:1e:
ac:f1:cc:3c:44:fe:1c:c5:07:2c:10:7f:00:7d:eb:
9a:d7:1e:6c:ea:5e:81:50:48:35:24:96:f1:d5:ac:
57:b3:7c:d8:8d:4c:24:fe:9f:13:79:f1:13:ee:0d:
44:57:52:32:de:21:52:38:c5:4a:b7:d2:88:80:59:
63:a3:18:61:37:7f:78:8e:2c:d1:d8:f1:af:fe:78:
a8:0f:66:18:fc:fc:ab:22:ba:bc:53:24:ba:c6:d9:
54:07:6b:d3:f3:c5:f1:e4:a2:27:25:86:c3:cf:a9:
63:71:a6:8e:85:23:12:2c:ee:58:88:8e:84:c1:c4:
fd:4d:fa:aa:a9:5f:9c:b1:b2:4f:0c:43:ff:44:60:
82:3a:a8:b0:b2:d6:d5:5c:a9:f2:9a:04:35:2a:c2:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:93:84:1D:3A:6D:FC:32:49:88:1C:27:ED:48:1F:E1:F9:A9:8B
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5f:e5:48:83:52:e1:03:6c:12:40:59:9b:a2:02:cd:aa:12:
39:d2:8c:0a:ca:b6:75:2d:31:d4:74:94:43:1f:9b:be:a1:11:
a2:0a:7d:c5:eb:b6:7b:f4:a0:c4:60:c2:f7:97:47:c9:bc:b9:
cc:82:c2:c5:0a:4e:22:1b:26:11:23:81:15:29:5b:27:ec:27:
9c:25:1f:c8:cc:8a:c2:69:ab:6c:de:48:18:8c:5f:3d:43:37:
98:e0:7c:88:01:27:8c:f4:63:60:bb:8b:c3:a1:97:aa:c7:df:
c0:71:95:1f:39:88:19:e8:58:59:e9:9d:1e:d9:09:a4:32:16:
56:90:64:05:6c:d3:2d:f7:3b:f3:f3:47:c3:64:43:5d:a0:5a:
82:c0:58:0f:a7:bd:5d:61:8b:11:f7:68:70:8c:67:ca:a3:33:
a2:d0:10:b5:f7:39:30:87:0c:d2:22:fe:3c:17:cf:88:12:cd:
81:11:46:ae:eb:1e:0d:04:49:ba:c9:7d:81:61:00:87:3b:56:
7b:21:5c:60:69:b7:95:2f:56:a0:ca:32:a4:59:5d:a3:7b:74:
a8:fc:99:cc:ac:3b:15:b5:2c:f9:79:c4:9f:b3:05:29:76:36:
96:7c:fe:5d:42:01:0a:ed:8f:96:59:9e:06:82:b5:5c:52:c7:
83:cc:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:54 2025 by rpki-client