Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier: zgQZq7E/FoyLJLmrrqjTMy3+ei3T2UDMapSu38f+0O4=
Subject key identifier: 5B:4B:6F:4E:75:F8:C1:C1:BE:BC:AB:7D:C6:0D:68:36:19:90:51:1D
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial: 0198D5BC20A6F7A29AF3564E43EA338C00D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number: 0586
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: BG1b5D/qFsywvuGTFvbQFif8WvzMIhz6nfcNf88IS0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:20:a6:f7:a2:9a:f3:56:4e:43:ea:33:8c:00:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=5b4b6f4e75f8c1c1bebcab7dc60d68361990511d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:fb:f8:58:2f:a3:e0:94:c6:73:af:94:6d:
0f:3e:14:24:85:0c:40:5c:6b:be:aa:ac:18:2c:5c:
60:bd:6d:64:5d:3f:4c:4c:c1:11:f0:1b:18:17:6e:
11:41:1c:cf:d1:d5:89:84:1b:ae:f7:69:5e:ec:b6:
f8:dd:b8:e8:21:60:8c:ee:8c:24:be:38:2c:f8:c6:
d1:d8:70:74:07:54:68:73:64:b1:cc:60:f0:03:8d:
9f:4f:8c:f3:3c:e6:86:f1:c1:60:1a:98:79:77:09:
6e:98:08:e9:1d:72:2f:b8:43:ab:90:24:58:d1:cc:
f1:9c:a8:75:37:9c:7d:9d:39:b2:d0:80:a0:a5:2b:
c3:87:af:55:d4:4c:82:43:d9:f1:04:79:08:47:3e:
31:69:d9:fc:46:15:8c:16:cc:48:e6:5b:31:c0:3f:
5e:fd:45:65:0a:50:fe:32:82:e4:64:0d:2e:a2:02:
00:e1:b0:0a:b4:2b:bb:4f:74:fc:23:d1:17:27:94:
d2:45:e5:1a:9c:41:23:f1:a3:ae:35:9b:c7:18:e0:
f0:32:7d:01:13:97:d8:1a:52:ea:48:71:97:70:67:
5b:37:8e:55:c4:ba:67:d2:c0:3b:cb:22:bf:d0:2a:
73:3e:49:69:af:70:e2:53:26:67:31:44:af:b4:ea:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:6F:4E:75:F8:C1:C1:BE:BC:AB:7D:C6:0D:68:36:19:90:51:1D
X509v3 Authority Key Identifier:
keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:8b:87:c2:6d:79:60:58:34:c9:07:2b:5a:44:6e:08:e7:
a9:0d:ad:ec:a2:87:58:b6:e8:68:c4:4e:44:4e:af:95:87:a8:
f7:f4:7f:f1:f6:16:1b:f0:1f:72:fb:bd:e8:5d:97:ec:ff:18:
a5:55:ca:30:4d:fb:ee:8c:b7:0f:44:26:0d:ec:15:15:4e:d1:
c6:82:87:53:e5:2c:8a:3b:ca:52:6a:7d:2f:7a:5a:a9:dd:bc:
53:a4:08:6a:66:02:3f:17:9a:7f:da:27:5f:82:9c:60:d1:da:
b7:48:7f:41:be:42:7a:b4:06:fc:b3:d6:f3:f8:10:7e:13:90:
bf:e5:17:b1:a0:27:c7:d1:fd:c6:54:38:62:11:3d:bd:37:4e:
1f:42:bf:71:8a:f4:07:d4:e5:62:c0:0e:06:42:4c:36:1e:21:
24:e8:96:ec:82:95:94:63:cf:28:5f:56:de:ef:3e:00:d2:8f:
de:aa:77:13:5d:5d:21:9c:db:a2:cc:fb:d1:2d:e4:75:72:ca:
99:78:cd:59:68:ac:53:21:14:e5:07:30:62:7e:13:df:0b:d4:
21:90:36:2c:47:73:9d:78:c3:85:2a:ad:31:a5:80:a6:7a:d9:
50:1c:fb:59:99:eb:b4:7d:51:d1:ad:db:dd:88:c0:7b:13:76:
1b:e3:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:18 2025 by rpki-client