Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: BfXPi8El0UhQfPGRemIxav55HxLvA+lfW42otzHTujs=
Subject key identifier: 9C:F8:71:A1:38:ED:4A:DC:2F:03:CC:BA:41:53:24:16:9C:24:28:ED
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 0198D5BB92D02E51D44CD626DE57E5BAE754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 110D
Signing time: Sat 23 Aug 2025 07:01:36 +0000
Manifest this update: Sat 23 Aug 2025 07:01:36 +0000
Manifest next update: Sun 24 Aug 2025 07:01:36 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: 2AMahaCiloOdN086Itz9cW20VBsa/NeYGavm26ka4bQ=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:92:d0:2e:51:d4:4c:d6:26:de:57:e5:ba:e7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Aug 23 07:01:36 2025 GMT
Not After : Aug 24 07:01:36 2025 GMT
Subject: CN=9cf871a138ed4adc2f03ccba415324169c2428ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:d8:b2:8c:21:21:bc:c2:90:48:d5:3a:20:
1e:fd:5d:7e:dc:7b:85:97:44:e3:d0:f4:66:f8:56:
7b:49:12:dd:d2:f7:db:77:47:d9:cf:87:46:4f:50:
59:a2:42:1c:e2:35:af:56:98:fd:9c:03:4c:db:11:
b4:e6:ef:4b:c1:38:77:19:9e:87:dd:78:d7:6a:95:
68:cc:e1:d6:41:5d:28:ed:48:f6:77:e9:47:30:02:
ac:42:b7:60:8b:c5:7d:f7:52:03:f0:c4:c6:21:4e:
a9:d8:92:98:d7:83:09:7c:a3:16:21:04:ec:3b:6d:
dc:64:1c:0d:a7:b3:d9:df:29:cb:e6:1e:c0:f1:6c:
76:cd:a5:b3:23:09:b3:0f:4b:77:dd:64:c9:dc:03:
c9:b1:cf:9b:c4:c6:24:5f:49:08:94:57:62:9c:f2:
2e:49:15:61:56:de:28:4f:e3:63:ec:33:f7:bf:33:
23:8f:5f:96:e6:4d:61:11:f7:21:7b:56:4c:7c:3e:
29:e1:f0:60:32:8e:21:e2:1a:5b:ca:cc:96:84:a3:
e7:81:6c:8e:d1:00:fc:40:91:24:24:ff:84:8a:74:
eb:ee:7c:84:85:80:f7:2d:14:69:d4:4d:e8:bb:c2:
4e:ff:ac:58:69:39:d0:54:94:c6:1f:5f:56:82:2c:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:71:A1:38:ED:4A:DC:2F:03:CC:BA:41:53:24:16:9C:24:28:ED
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:e7:e0:5b:f8:2c:c5:dc:ee:c8:41:dc:4a:46:16:25:51:
77:42:fa:0a:be:c3:9e:23:db:95:8c:8d:8b:38:7f:15:7b:9d:
a4:3d:5e:48:9b:42:96:13:c0:9b:c6:b1:7a:9b:25:88:b0:e6:
a6:e6:bc:ee:dd:0b:7e:9f:59:a4:8c:dc:f5:34:34:6f:de:d2:
3c:f0:1c:e0:d8:a7:f8:8a:8b:26:69:cb:7e:ad:73:11:05:9b:
d3:c1:35:5c:93:e8:8f:0e:0e:78:ee:af:ca:2f:31:c3:ef:85:
e8:e8:61:a2:ca:b8:c1:90:11:03:f5:fd:7a:91:70:16:29:3e:
fd:6a:92:6b:35:4c:4b:07:54:19:44:a4:0d:38:2b:80:c0:e3:
8a:51:30:3f:01:d9:02:4c:f9:99:ce:cb:e1:c6:6b:35:e2:91:
0d:49:4d:2f:9c:c8:5f:f9:b3:89:a4:e1:1d:1e:94:e5:34:0d:
51:51:3f:c6:d9:38:77:33:40:43:7f:0e:2a:3d:12:70:8e:ab:
de:34:a9:0a:76:f9:5c:1a:2f:82:4b:ae:b0:d3:9a:24:61:32:
f2:cf:4e:e7:00:79:bf:50:df:b7:46:9c:38:23:b7:7f:18:43:
e2:28:42:69:35:3c:7c:5c:50:d1:eb:7e:0c:80:66:8f:64:b2:
cc:fb:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:24 2025 by rpki-client