Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: Q5vtZRacGObKO4gtvuIpCrOtq3lssFefaNNSHtpmgTg=
Subject key identifier: B4:E6:F3:73:12:DF:01:81:71:35:D0:A8:E6:C8:8E:DF:D3:EB:E9:54
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 0198D6CD9050DB436E6DB9C043784C93EF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 02BA
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: hRUcMv1PeI2oxPY7KQgx25AN1jzIf/uqORL+tqWSW7Y=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:90:50:db:43:6e:6d:b9:c0:43:78:4c:93:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=b4e6f37312df01817135d0a8e6c88edfd3ebe954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:87:34:1f:20:8d:62:64:20:52:fc:c9:51:
db:d4:e4:72:24:d7:87:8c:6a:12:c5:f6:09:5f:6e:
c4:c4:a5:5b:23:b0:40:e4:cc:73:13:92:1e:ed:47:
bf:79:41:04:2e:0c:0f:02:62:05:9e:a7:71:e4:b8:
59:28:93:8a:68:ef:cd:41:83:e3:d5:a5:20:1a:e9:
a0:94:42:49:d6:62:c9:04:8b:d6:ca:5a:1b:48:7a:
a8:69:c5:d8:18:be:72:ab:db:97:48:4f:75:86:79:
17:3c:dc:0f:6f:01:44:86:f9:ff:26:79:ad:b1:5f:
ab:61:4f:a1:7d:e2:b6:96:0b:06:d9:59:da:43:93:
8d:b0:a2:a7:36:81:06:ba:18:1b:2c:70:70:b0:fd:
1c:a1:f2:30:a3:0f:51:5d:7d:79:97:cd:56:f6:5e:
b6:d0:41:9a:7b:73:f6:2c:81:2e:2b:45:10:d1:3b:
68:04:7e:ef:67:26:f7:82:18:05:f2:eb:fe:18:da:
a1:d7:05:cb:92:5c:68:84:a6:d4:cf:4b:3e:07:a2:
44:46:71:87:08:fc:d3:9c:82:06:ff:5c:7d:88:d0:
3c:db:94:7b:bc:7a:45:af:5b:18:b1:61:bb:cc:3e:
b9:78:8f:9d:bb:6e:05:7e:99:9b:4e:da:88:9b:79:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:F3:73:12:DF:01:81:71:35:D0:A8:E6:C8:8E:DF:D3:EB:E9:54
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:a2:4e:37:7c:2d:70:d5:23:4b:b1:fb:93:ac:70:b4:7e:
19:be:88:35:86:76:65:44:2e:41:1d:53:3e:af:2c:a6:9c:31:
36:3d:3d:25:dd:2b:ff:84:72:3f:9d:d4:c3:84:52:cb:8d:d3:
15:91:68:39:18:0f:f4:19:a9:12:6e:b4:fc:80:08:5c:26:d0:
de:7c:92:6e:e9:00:44:d4:5d:94:69:4c:3c:fe:ee:3a:4f:46:
b4:3b:ff:c7:63:2e:01:5b:52:50:ce:de:9e:5c:74:54:04:5f:
42:b8:70:8a:f7:35:32:81:c8:88:f8:42:2f:f2:19:29:90:7d:
67:26:d5:93:d4:5f:78:d0:77:dd:f4:b3:14:c3:32:8a:91:ee:
ae:e5:17:f6:c6:45:6d:36:7f:d4:c2:1e:72:60:3f:ba:e9:9c:
59:42:fe:a2:eb:28:66:6f:9b:7e:c4:3b:0f:89:92:f7:d0:66:
79:a7:bc:cc:9c:44:79:f7:ea:11:cf:f3:10:e5:d5:50:64:2c:
38:cf:05:f0:16:0a:c4:7a:cd:4b:bc:d7:ab:26:07:bd:f9:df:
b2:f9:2a:9b:a1:cd:cd:bc:22:3b:54:65:35:27:2f:a3:0e:c2:
75:17:27:6c:2f:d1:22:49:a0:f8:f9:73:4e:21:55:d0:bb:51:
ba:66:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:42 2025 by rpki-client