Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: +2kPxKgJsjcTsWUhWBVvsVDZvTuthsF9VOLCV/oTk8Y=
Subject key identifier: 49:45:FC:69:D5:79:E3:29:08:4B:43:E1:CD:03:FD:7C:6F:59:CE:2D
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 0198D54EBF8B0C5A686E6BF22657500C92B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 02ED
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: nS267gQNzO0qW8RlcsUESckdjtmkkuFJqlOmU8q1j/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bf:8b:0c:5a:68:6e:6b:f2:26:57:50:0c:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=4945fc69d579e329084b43e1cd03fd7c6f59ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:d8:2b:c3:58:32:4a:2d:54:7e:0e:f9:1b:
6a:67:df:5c:e6:94:0f:a0:4e:ab:94:24:e7:96:e4:
ce:3e:d2:91:dc:26:ae:cf:dd:92:8c:08:86:55:c0:
a5:22:52:8f:d4:bc:56:40:c0:07:a4:33:47:ba:07:
1f:e0:93:37:7a:51:1f:83:36:4f:22:4a:3a:c6:c4:
e9:21:34:e0:e0:64:bd:29:43:fe:ee:5d:b4:1d:45:
5b:6e:8a:20:4e:fb:fc:00:ce:ee:34:a7:f5:50:0b:
91:d1:b5:06:aa:87:5f:0b:53:56:ec:d0:bf:76:82:
37:c6:fd:0d:20:80:71:43:33:6d:2a:9e:90:df:d9:
64:35:34:58:01:89:51:94:cb:7f:53:43:f7:94:b4:
f8:b7:a2:d6:38:b7:55:e3:ba:56:2f:61:30:6a:b8:
f8:78:6d:44:58:dc:2c:38:7d:ff:b4:85:76:e1:fa:
09:a8:96:06:0a:e4:4d:01:b0:fb:d6:81:74:c3:43:
24:66:27:f5:55:9e:62:64:4c:9b:1b:04:04:4d:eb:
de:3c:8f:53:57:f9:df:68:ac:e9:61:ad:ec:0e:9e:
9f:07:b0:f5:f2:2a:86:18:2e:f6:92:82:f2:74:f8:
4f:bf:08:6f:3b:c7:24:db:5e:49:e4:e5:a8:ab:f1:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:FC:69:D5:79:E3:29:08:4B:43:E1:CD:03:FD:7C:6F:59:CE:2D
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:a2:55:7c:8e:d9:f6:d9:81:2f:1f:29:b2:b4:ab:c6:1b:
f3:21:bf:4d:b6:eb:b1:4a:19:b2:87:6a:bd:eb:2a:11:4c:ab:
63:3f:a2:19:83:4b:16:53:89:f3:12:67:67:85:56:fb:8b:3b:
1f:25:cc:70:d0:0b:c7:9a:82:d8:cd:86:0d:8d:13:ea:6e:0f:
b9:b0:49:b2:08:4c:2b:b6:93:b4:0b:56:4d:6e:8f:22:11:9b:
dd:82:64:b5:b2:1e:2b:96:39:ec:d3:b3:fb:cd:06:60:87:6c:
ee:7b:40:60:66:3f:0a:00:84:57:56:bb:3a:ae:dc:c4:39:78:
72:36:aa:f1:51:55:e1:fb:6b:ad:90:b3:43:ea:d4:46:d9:13:
d6:9e:50:f8:37:24:3c:11:02:d2:e8:34:1f:40:d2:11:7c:8a:
f8:4a:28:33:a8:b6:c1:fd:32:a5:d8:2a:61:a5:90:78:ed:38:
0d:7b:81:2e:25:c8:5f:de:f2:a2:5a:66:5b:d4:56:18:35:82:
cd:e4:74:24:74:fc:cb:a6:66:bf:38:cc:91:c8:31:ac:cd:63:
5d:0f:66:07:43:92:b7:65:89:fa:8f:75:a8:9a:5c:71:99:86:
a9:16:9e:d9:df:2f:17:79:e5:a7:b5:cd:2d:fe:4d:fb:06:28:
77:7d:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:30 2025 by rpki-client