Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: YPnok7IB8qX6Hp4+Cl4N1x/eFXWPQP7a1gWt5nzHexQ=
Subject key identifier: 6B:C6:0A:8D:10:C4:9E:D4:04:B6:54:3F:E6:FB:72:46:9E:04:EC:AD
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 0198D5BBA2DDCF4C4863A67D24B1FB4EA049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0ABA
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: 0dO2P6rdWtbgbBJNSoV3c21zqot44KydBmEByCiZVDw=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a2:dd:cf:4c:48:63:a6:7d:24:b1:fb:4e:a0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=6bc60a8d10c49ed404b6543fe6fb72469e04ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:cb:f1:ba:9e:70:7c:72:d8:ae:0c:13:90:
9c:89:4f:ac:92:3b:96:f9:48:92:2e:fc:3a:2a:ab:
28:61:df:8a:e0:57:42:94:6e:78:60:be:51:da:a9:
34:98:44:46:76:12:39:c1:74:43:1f:22:3f:fb:a9:
80:33:4e:48:ae:6a:d4:75:ae:00:cd:b3:22:71:fd:
ca:f4:60:b9:2c:17:42:9f:29:27:1b:52:b4:37:37:
fa:48:6e:93:43:2c:ad:73:92:25:35:6a:88:f4:3a:
08:21:06:fa:c6:0b:d6:7c:88:26:37:8f:41:84:57:
a6:27:b2:0f:ef:4a:57:cc:26:d8:6c:20:dc:9b:79:
58:6c:f6:72:81:ea:dc:3c:87:44:d4:64:5f:5f:4c:
a8:48:72:73:a3:9c:9b:d5:20:c9:7c:77:6b:b0:68:
a6:00:15:26:7e:3d:68:aa:4a:65:82:bb:79:e9:1d:
71:bd:fa:04:85:3f:d0:ee:57:24:07:b1:42:25:b4:
ee:75:8b:cc:48:e5:4a:5c:95:63:7d:dc:b3:ed:ae:
9a:e4:dd:00:2d:0b:69:0a:82:4f:d3:3c:f3:ba:09:
a6:19:5e:d3:aa:f9:7e:77:c3:5b:71:f8:db:aa:ac:
99:e1:2a:04:0c:14:f7:ff:5c:e9:e3:3e:ab:a4:1a:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:0A:8D:10:C4:9E:D4:04:B6:54:3F:E6:FB:72:46:9E:04:EC:AD
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:b5:d4:da:42:14:03:fa:c1:d1:80:cf:31:d9:6d:4d:d1:
54:64:37:30:ce:bb:12:f6:33:a6:11:c1:d0:f0:a3:42:47:ec:
4e:cb:0f:79:73:bf:cd:6c:77:47:7f:a6:a2:87:5a:80:4b:9b:
c8:8a:77:a1:0f:0c:14:36:a6:2e:4f:30:e1:a5:26:aa:95:81:
83:13:6b:4b:10:91:1a:2e:28:fb:08:f0:7f:bd:59:ed:52:ca:
66:cd:0c:dc:2e:ec:e6:1b:be:44:bb:ff:ee:a4:a9:74:45:ac:
59:70:77:df:10:0e:f5:24:c2:de:2a:ad:d2:85:d5:8f:85:69:
1f:ac:67:57:e2:0d:cb:5b:ff:1d:2e:e3:e0:c2:f0:bd:e5:a7:
fb:94:bf:93:22:d9:a1:71:f3:d0:f9:ae:03:9c:22:7d:4a:b0:
26:ca:a3:57:c1:dc:d1:30:2b:25:ae:71:6c:9f:47:1b:89:62:
db:d4:cf:5c:d0:6e:82:89:32:e9:a2:19:e4:db:31:26:87:18:
4f:62:b2:49:fc:f1:9e:b5:75:38:bf:65:9f:35:48:a8:90:85:
c3:bc:eb:00:71:88:cf:fe:e0:93:6c:91:87:2f:05:b4:5c:91:
e8:70:7d:6c:90:91:ee:d4:7a:7f:b9:e7:75:3b:29:4a:36:a9:
2d:02:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:18 2025 by rpki-client