Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: H//1LwCkCW6u8HMd4uSnbrWQFmuQfFT+rB29O5DiPrs=
Subject key identifier: 31:2E:EF:DE:4C:99:F7:A9:8F:0D:F1:6C:DC:25:B9:06:0B:7C:E4:00
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 01993BA76C7046421C671BE0B18B69B21E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 1610
Signing time: Fri 12 Sep 2025 02:00:51 +0000
Manifest this update: Fri 12 Sep 2025 02:00:51 +0000
Manifest next update: Sat 13 Sep 2025 02:00:51 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: U2z0XKNtMeKFxBnM/utFhpVRqiys/IxVUGZVPEpzois=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a7:6c:70:46:42:1c:67:1b:e0:b1:8b:69:b2:1e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Sep 12 02:00:51 2025 GMT
Not After : Sep 13 02:00:51 2025 GMT
Subject: CN=312eefde4c99f7a98f0df16cdc25b9060b7ce400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:bf:71:29:f2:da:44:8c:3d:79:e7:ed:7f:
47:62:b2:13:1c:7e:b1:a8:fa:62:90:d6:1e:a0:24:
2e:08:38:de:cb:c1:a1:6f:8f:db:8a:18:0d:11:9a:
7a:01:a8:c0:94:af:33:89:56:a2:8a:4c:15:6f:b8:
10:43:21:d2:d9:67:a7:79:21:b9:54:b7:27:48:8f:
3f:49:2e:b7:1a:4d:95:f6:5b:4f:d6:20:b3:fa:df:
35:05:ba:ab:5e:78:4a:35:b6:20:c9:af:5a:97:94:
2f:e6:b9:87:a9:93:ea:04:8f:57:11:92:8e:07:45:
66:fd:e0:77:58:ab:13:70:1d:b6:78:7b:bd:73:43:
27:78:2a:01:9d:e4:6d:26:e4:89:73:8d:cd:79:d1:
28:14:83:e9:88:24:b1:96:a3:80:d0:64:77:00:3a:
18:f9:cb:bc:7f:ff:b7:30:94:d4:71:8d:b6:2e:a8:
99:5d:7b:11:7a:31:ed:33:55:c0:12:fe:49:e4:00:
59:90:db:8f:5f:cb:8a:3d:ca:1a:30:98:b3:f7:45:
6e:9c:82:72:d5:82:9a:d5:be:46:2d:3f:c2:e1:3e:
df:94:37:37:9e:cd:cf:19:f7:69:4e:59:38:cc:34:
ae:89:41:37:bc:8b:eb:86:ee:99:9b:20:d1:7e:6c:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:EF:DE:4C:99:F7:A9:8F:0D:F1:6C:DC:25:B9:06:0B:7C:E4:00
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ed:e9:fa:7a:2e:6d:b6:bb:fc:57:50:e1:ce:c6:1b:ed:1b:
4f:4f:1f:66:66:45:ab:31:34:2e:92:79:7a:53:fc:25:23:9e:
a9:6c:ea:a0:0f:24:36:0e:4b:78:ce:e5:32:90:ce:cf:98:4d:
e9:23:81:5d:69:5e:66:1e:2f:d2:2b:f1:e4:1a:53:0a:c9:bb:
5a:21:dd:36:3b:36:ca:be:da:01:7b:f9:06:cb:74:ed:9e:59:
c0:74:cf:3d:96:66:56:b0:74:03:32:02:43:67:78:b1:ef:90:
8f:5f:9a:14:45:1a:5f:6c:a2:f3:be:c7:45:71:47:47:ec:5b:
b5:26:b8:c1:a2:8e:88:97:33:7c:a2:88:24:90:b2:06:6b:92:
e9:ff:05:1a:bf:e0:a3:90:bb:32:1a:7d:1d:10:e8:d1:ee:bf:
a9:40:37:46:a9:b9:6f:e5:28:63:47:93:96:4f:be:15:b9:c1:
f2:50:46:1e:3f:9f:7e:b9:5c:69:a4:d1:89:88:e9:ba:ed:16:
48:05:fe:9c:28:64:ec:e1:1e:08:5c:63:ae:6b:83:3e:cc:ae:
06:ee:65:30:5c:9c:ef:67:84:ac:5d:80:2a:f5:64:03:68:f8:
50:b2:50:27:c8:ab:1e:cb:9e:53:58:0e:8f:aa:48:bd:40:84:
03:df:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:33:54 2025 by rpki-client