Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: dTH/SsgYMpwGRb3Icu1RhdckUYL+K8nL+dmJWrLBmNM=
Subject key identifier: A9:81:30:A1:7B:C4:A4:72:21:E7:C4:56:D4:B6:A2:5F:1E:9B:08:15
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0198D54E090AF3320DB4158FB87DFCCE5DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:57 +0000
Manifest this update: Sat 23 Aug 2025 05:01:57 +0000
Manifest next update: Sun 24 Aug 2025 05:01:57 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: BqjdSgLg9Hl7/r68zIm/xedqdulbZ4vrGFO+uhJdnSc=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:09:0a:f3:32:0d:b4:15:8f:b8:7d:fc:ce:5d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Aug 23 05:01:57 2025 GMT
Not After : Aug 24 05:01:57 2025 GMT
Subject: CN=a98130a17bc4a47221e7c456d4b6a25f1e9b0815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7f:0c:de:66:b3:2a:bf:92:4f:31:0c:a4:e6:
8a:07:a1:9c:5e:d2:4d:14:d2:9e:6b:ec:79:28:91:
96:66:b2:43:11:a9:fa:0c:7c:60:3b:84:45:06:8a:
57:af:5f:dd:91:e4:9e:f2:c4:31:49:4b:d8:d9:7c:
80:23:8e:4f:48:65:9d:51:ff:e4:c5:a9:66:14:12:
b4:50:6f:ab:81:0d:e1:63:03:e2:01:7b:cd:55:fe:
88:13:f5:4b:a0:9b:50:5c:90:21:4b:30:9d:c1:35:
9b:82:bd:21:8e:09:bf:cc:25:d7:b6:34:9b:88:cc:
88:ec:e6:48:e9:dc:a9:38:b4:4e:51:01:79:b6:c6:
c4:b6:de:a4:3f:5f:82:fa:10:12:c0:35:c3:21:a9:
e3:ef:45:b1:18:e9:f6:01:df:89:e0:f5:97:53:78:
b5:f8:5b:ee:91:b9:5f:67:94:1d:95:1a:df:8b:a0:
86:aa:3d:62:6e:97:1c:3c:3a:c2:50:c2:72:f5:b0:
dd:09:02:4b:5e:5e:c3:50:2b:d6:e0:d8:c5:56:76:
6f:7a:42:63:e9:fe:b8:f0:10:25:29:24:2c:5d:f8:
ab:ae:bf:70:29:b2:e0:63:c4:2e:61:92:c4:bf:01:
86:23:17:ad:cc:a4:bc:9c:8c:bb:da:53:a3:20:5a:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:81:30:A1:7B:C4:A4:72:21:E7:C4:56:D4:B6:A2:5F:1E:9B:08:15
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:aa:c4:76:36:7b:e7:43:26:3f:97:19:08:ca:db:df:32:
e6:37:e7:b5:0c:ed:02:2f:3a:d5:b2:2b:01:d5:bf:df:fc:a4:
11:f2:2a:45:38:f0:2d:7e:09:38:94:85:ef:16:18:ee:91:68:
be:11:15:32:fd:cf:58:96:a3:f6:f2:b2:a8:e5:26:d2:1e:75:
ab:a9:39:57:55:44:01:df:17:07:ce:51:8c:c9:b9:73:a1:9b:
e0:09:76:b0:ec:f1:ae:b7:84:c2:52:44:95:cd:55:44:69:d0:
74:87:07:c1:1a:11:c7:63:7e:2f:b1:8e:c4:4f:4a:f7:0e:a3:
14:de:2f:2d:b1:14:ed:19:c5:99:10:7c:8c:c0:31:0a:97:08:
20:44:7a:7f:be:4f:88:bc:6a:5e:9f:bf:6b:a5:2d:cd:ad:84:
0d:62:24:82:7c:e2:32:6f:2c:d0:e9:da:d0:46:3a:17:c7:17:
f5:2e:2f:64:6e:13:64:c3:20:fa:b3:56:16:7b:d3:1a:bc:20:
fc:c3:e6:ff:74:3f:5e:03:71:2a:5b:5b:90:8a:9d:6e:9e:b5:
e3:25:d6:c4:b4:d3:04:f3:55:19:84:d2:9e:b5:3f:04:99:bf:
85:01:43:e2:be:75:9d:35:be:bc:4f:d0:aa:c9:1e:1a:82:96:
44:22:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:35 2025 by rpki-client