Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: bBhB//cuE3uN4U7NO1FQSWuZ1a0faZJ4Z4Y4wox4vl4=
Subject key identifier: 3B:F6:9F:CD:C9:A1:2F:7F:A1:82:41:44:51:C7:DF:3E:42:42:96:31
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 0198D73BDEE8392DFB4C18FADD20D7513AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: NARSfg2QuE027/Cy2o1UQcEP2/eb6TTah14PyAvZ6z8=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:de:e8:39:2d:fb:4c:18:fa:dd:20:d7:51:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=3bf69fcdc9a12f7fa182414451c7df3e42429631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:01:c6:8c:9f:fa:85:49:ed:6e:c1:92:e4:
03:13:24:83:ab:0a:42:cd:c2:6c:69:8d:3d:ee:76:
ae:18:34:8d:06:59:5d:19:ad:50:59:72:00:c5:c2:
19:f1:23:4b:46:8a:8b:3a:c7:d5:8a:00:21:d3:8a:
06:78:46:69:66:c1:a8:24:ce:87:a7:64:af:96:7a:
9f:04:68:7e:2c:f0:f7:a4:aa:a9:f9:db:96:8b:d6:
f5:06:df:64:a1:b1:96:2a:6f:7f:09:95:94:77:66:
be:d5:78:5c:9e:aa:86:db:be:4e:05:0e:e6:e7:e0:
04:dc:c1:64:47:91:f5:77:58:b3:ba:4c:36:b9:25:
e3:ce:d6:d8:80:30:c0:f3:4c:f5:27:91:6f:cf:1d:
38:4f:f6:35:72:e9:58:33:ac:a0:94:e0:13:9e:74:
80:c3:ab:1e:aa:5f:57:3c:78:fe:fe:9f:7f:27:28:
c3:3d:51:11:87:9d:5d:fa:e9:a0:84:38:41:84:78:
26:d9:f3:a1:bd:e7:ea:2a:fa:57:0f:48:10:5d:25:
6a:26:70:92:8b:bd:85:da:7c:cb:41:99:93:61:37:
1e:33:38:56:c2:94:2c:f0:b9:19:b4:95:de:c2:bf:
3f:a1:da:5c:5c:eb:a4:33:33:5e:3c:fe:24:72:bb:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:9F:CD:C9:A1:2F:7F:A1:82:41:44:51:C7:DF:3E:42:42:96:31
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:09:eb:4b:63:e7:75:dc:ea:37:ac:bd:d2:83:97:3c:df:06:
fa:88:94:d5:db:aa:87:4c:5a:85:f0:fb:13:2e:25:94:90:54:
2e:30:48:4f:57:0e:ea:72:b1:68:01:39:94:36:a3:f3:d9:e6:
a3:9d:9d:b3:67:04:cd:9b:3a:6f:b2:8c:cf:78:92:56:92:68:
8c:f1:e6:68:a8:16:98:0d:f4:3b:e6:df:13:bf:54:eb:3f:f0:
cd:5a:13:4c:fd:4d:1f:f0:af:3e:cd:1d:76:5b:1c:ec:36:df:
31:6a:2c:95:2e:c5:f3:dd:bd:17:a7:2e:89:51:38:d4:f5:ee:
bb:81:35:71:2a:50:a7:e4:8c:c0:8a:1e:ef:41:ad:16:31:42:
02:9f:d7:e7:2b:41:e7:69:4c:03:e6:44:1c:b1:47:15:4e:41:
d0:b9:fc:ed:4c:9f:8b:c8:de:71:06:de:86:38:66:49:62:29:
18:08:2e:d2:e4:17:a0:f7:50:f4:c3:24:00:86:98:96:11:79:
13:72:da:d3:a5:0d:ce:7b:26:74:a4:04:15:48:5e:c1:cb:15:
c2:9c:ac:ac:36:9c:23:19:4e:73:3e:08:e4:0f:76:e2:e1:75:
1f:6c:b6:53:67:41:31:70:35:22:7c:60:f8:69:2f:3a:5c:a5:
00:d9:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:40 2025 by rpki-client