Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: 6/5Q0ztBq9I77f1J0IkP/v17/09WWf01SV67ui+khIA=
Subject key identifier: E2:F5:A2:7E:03:24:62:8B:E1:60:0F:4C:82:00:44:C3:06:56:FF:4B
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 0198D40495785969A04A48BB4C32B7B4FF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 112D
Signing time: Fri 22 Aug 2025 23:02:06 +0000
Manifest this update: Fri 22 Aug 2025 23:02:06 +0000
Manifest next update: Sat 23 Aug 2025 23:02:06 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: TtAuor3UN/D9CeWJTXNb6NOZtSR7WfJnk7hMfZwskFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:95:78:59:69:a0:4a:48:bb:4c:32:b7:b4:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Aug 22 23:02:06 2025 GMT
Not After : Aug 23 23:02:06 2025 GMT
Subject: CN=e2f5a27e0324628be1600f4c820044c30656ff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:c4:b0:7a:d7:7f:c4:48:a1:c4:c8:be:0c:
b5:36:85:01:62:05:30:63:a6:9c:bd:bf:80:84:12:
cb:38:60:fe:15:c5:5e:ea:5b:dd:b9:70:2c:c3:c4:
57:be:82:14:c7:57:51:c6:15:d9:22:4a:be:11:75:
7f:65:84:56:88:f7:57:84:50:cd:a6:20:7b:65:d0:
d6:68:ec:c5:44:84:5a:b4:66:8a:d1:7f:9c:46:f5:
87:45:fc:6b:81:72:ef:61:90:97:6f:a4:c1:c7:e0:
ae:55:78:9d:f5:41:29:99:02:35:18:0d:32:a6:b5:
9c:a7:94:98:4d:24:af:a5:dd:6b:b5:c9:c5:51:20:
af:c4:99:35:22:4b:2f:32:1a:71:57:dd:47:b7:a0:
f9:b8:0b:c4:04:09:5b:12:1a:15:48:75:2f:c2:1e:
4d:9f:74:f3:ce:63:77:7b:7a:51:90:82:6b:61:0e:
2c:ab:bb:ec:e6:c8:bb:9f:5e:fc:31:d3:e7:d9:ed:
00:09:97:89:c2:99:ce:1a:a1:45:07:a7:2e:bd:5b:
c3:fa:c6:0b:c8:51:b7:c7:5f:a7:d6:fc:df:ff:12:
b5:20:8a:de:b0:30:05:91:7d:b6:67:24:1d:d5:4e:
d7:c4:fb:ba:6b:f1:61:61:68:40:bf:16:fc:5b:68:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:A2:7E:03:24:62:8B:E1:60:0F:4C:82:00:44:C3:06:56:FF:4B
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:bc:fe:98:ad:e1:c9:6f:1b:8f:df:43:de:68:9b:e3:90:
f9:0f:95:ea:24:b3:b2:02:fd:ab:88:2a:15:99:24:e5:3b:83:
6c:d1:a3:e9:b6:88:ff:a8:43:8d:f8:ad:b0:91:89:e5:3c:0a:
b5:7f:5d:c7:b7:56:43:b0:c5:d0:6f:09:17:42:6c:88:04:46:
52:68:d6:e9:d5:61:6b:47:16:ee:3c:d3:0c:79:ae:3c:17:93:
75:61:9b:4b:6f:ea:16:3e:e7:15:8e:fe:c2:eb:c8:02:cd:a7:
22:c2:6c:50:b2:a1:be:bb:6f:94:1f:02:e2:9a:f7:ac:7e:f0:
30:3e:34:2f:f7:ef:73:5c:60:7b:a4:a6:a9:15:df:89:9d:ca:
1d:fa:15:9e:46:17:26:90:57:91:8b:35:9e:fb:29:81:24:a9:
95:3f:f5:53:1d:07:75:02:15:b7:dd:5b:1e:75:19:5f:5c:5a:
98:bf:12:ac:2f:b5:fa:27:9d:f7:85:de:db:e5:7c:75:16:49:
21:40:f7:0d:42:fd:cb:b9:8b:c6:34:1b:71:c2:c3:13:c8:50:
aa:64:b5:2f:7d:e0:4f:e4:84:ce:6c:59:fd:42:d7:c9:81:03:
4d:ea:04:d0:74:f0:cd:94:f8:2a:42:fd:33:22:95:c4:c7:07:
29:cf:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:12 2025 by rpki-client