Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: JR1Gat6SZ8l7QjKLyhs0VlPxBimT+sjVps4Z5GeAdUg=
Subject key identifier: AA:8B:D7:AA:5E:DF:68:5C:DF:92:D2:DE:44:4C:FC:2F:4A:F9:C8:03
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 0198D6982D2787BD1E119523D004D31C3F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 02B3
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: hBOR/NH0YHBvs0KPML4OOa5uyqG6Rhufiib9/jJlniA=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2d:27:87:bd:1e:11:95:23:d0:04:d3:1c:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=aa8bd7aa5edf685cdf92d2de444cfc2f4af9c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:8e:b2:f2:50:74:1b:32:b2:03:5e:8e:77:
ef:98:2d:39:f6:83:23:f3:27:b9:f9:0a:2d:23:04:
7b:7c:37:a7:56:a2:69:23:b9:2e:bd:ef:10:b3:30:
6e:6e:73:7a:0e:ff:e7:65:9c:9e:0e:58:26:e4:2f:
1e:e2:76:76:da:5f:8e:90:67:0b:ba:e0:a3:8a:2a:
e5:98:e9:3c:60:dd:9a:c7:3e:c1:fe:19:a7:41:2d:
f4:45:56:15:95:94:a2:27:10:d9:d2:d5:7d:d4:3d:
bf:b0:c0:96:15:8a:b8:a5:e7:8d:a9:ab:b4:b1:7a:
fa:d7:f6:30:99:c0:3b:7b:16:e5:0c:92:65:94:99:
2e:db:0c:fc:e6:ec:0a:3c:42:4e:63:13:94:ba:89:
b3:ac:1d:54:76:04:71:7d:62:ff:a3:09:1b:89:6f:
bb:2b:78:29:8d:09:2a:b9:25:45:c7:6f:78:0e:54:
76:57:fd:f8:eb:c4:e1:66:58:2a:43:20:2f:a1:81:
48:c9:85:ce:a4:82:11:a2:43:95:59:3a:08:01:af:
41:32:43:12:eb:65:c9:9c:52:57:3a:de:36:75:84:
df:12:b3:34:f6:27:bb:88:3d:a5:45:af:12:6c:3e:
8a:ef:46:4e:a4:f7:b2:d9:a3:24:d5:3c:bc:e2:c1:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:D7:AA:5E:DF:68:5C:DF:92:D2:DE:44:4C:FC:2F:4A:F9:C8:03
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:f6:b4:33:3c:43:cb:dd:48:0e:c2:3c:e2:b2:39:db:cf:
3a:c9:44:e6:82:f1:65:0d:0a:69:16:94:78:ed:b4:88:36:fb:
b0:d7:11:e6:70:33:e9:4f:fe:08:6d:15:2a:50:a9:87:9e:78:
9f:af:31:21:33:5b:99:1b:e9:81:04:48:00:40:1a:00:e1:09:
8a:95:a0:ff:85:8d:a8:55:3b:d2:71:32:68:5a:b1:c7:46:a3:
fa:af:ac:7b:66:92:99:ef:85:05:13:f8:1a:05:fd:74:ff:04:
7e:ac:17:39:d1:12:e0:1f:90:2e:8b:d1:f3:85:e2:44:6f:36:
90:92:d4:a4:b6:1f:06:9f:13:cc:fb:c3:a9:a2:d3:a2:c7:2f:
f3:db:7c:8a:b7:47:d2:4e:15:c5:27:0d:8a:79:43:68:19:68:
31:2d:b5:73:7a:b9:04:26:4f:ab:39:30:8a:3a:b3:e2:26:d3:
94:04:72:4d:ff:b5:cd:85:31:c3:f3:f2:71:c5:d5:e8:cc:a3:
75:10:34:c8:e1:6c:3c:14:0d:65:22:31:b5:9b:6b:be:68:51:
5f:66:5b:dc:f5:15:90:8b:1d:4e:d4:03:a3:a1:9e:95:d5:4f:
24:15:c7:1d:fe:9a:34:1f:91:af:fd:4d:d2:54:05:84:9f:55:
cb:ee:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:09 2025 by rpki-client