Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: sQ9HZ3pzVSjNRjPZBGeKk9h5IAJNzZQj8TYHGbU7Msc=
Subject key identifier: 48:A9:C1:92:9C:6E:3F:51:5D:0F:EA:46:97:0E:BC:CC:A9:F9:92:03
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 0198D5BBE7503FD816851B20206452D745D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: C4
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: Au6nZKgdTV+CDRuikx6nSJpO5/Tc0b/cpIK2Fsx8D0s=)
2: acXUcm42IS4pl31BFqGLL598V-g.roa (hash: tv2sOndhlPwn5kgKUF5qX+dekYD4mLLwcOPc7PK40dI=)
3: n3osC5rKdM6iHPZx6MqCr3JTQWc.roa (hash: suRQqEpXKgoazuJMwgkEGufz4KYSCm9sjlRmUwQJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e7:50:3f:d8:16:85:1b:20:20:64:52:d7:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=48a9c1929c6e3f515d0fea46970ebccca9f99203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:c7:6e:e1:58:f9:45:7e:43:88:34:75:c1:
e7:62:85:dc:21:2b:f6:98:3e:08:79:00:20:ec:7f:
7b:9b:e6:4f:d2:9d:5e:eb:eb:d7:61:a2:88:28:7a:
7a:c2:40:39:e9:2e:66:4f:20:27:89:e0:4e:8f:9e:
aa:59:b6:40:c8:7f:ec:66:f7:29:be:77:06:5f:43:
7d:70:6f:a5:8d:57:ff:ca:a7:75:96:cb:fa:99:b0:
01:44:85:7d:68:f5:05:2f:22:89:1b:2d:9a:f5:ca:
13:ac:42:76:81:16:49:96:c0:63:6d:f5:c7:5a:fb:
3f:b1:26:43:dd:f9:65:aa:e6:ef:95:40:3d:7c:f1:
7d:bd:1e:04:f9:69:ff:10:be:54:ad:81:3c:37:bb:
8e:82:ad:01:9d:45:02:5b:22:f1:40:63:ab:af:e1:
6d:0a:fa:24:18:eb:61:ff:b4:d9:de:08:40:34:8e:
ed:0d:01:38:e3:17:53:18:d8:33:32:f5:43:94:be:
9f:0e:8c:3f:f4:6f:5b:cc:ca:e0:1d:54:5d:36:c1:
8a:53:fd:9e:a4:26:eb:e8:99:43:4a:7e:09:74:62:
e9:c3:9e:d1:39:9a:dc:9d:ca:34:01:c6:8a:97:21:
9e:c4:fb:ec:f1:1e:3b:b2:84:65:82:7e:10:53:bf:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:C1:92:9C:6E:3F:51:5D:0F:EA:46:97:0E:BC:CC:A9:F9:92:03
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:e3:9e:eb:14:7d:8c:9e:4d:66:e0:f6:fe:bd:05:8c:7b:
3a:77:f8:e1:0a:7a:d9:f9:d7:b0:4f:86:8b:ed:32:2b:da:c1:
18:ad:ff:cd:3f:4f:be:24:30:ac:ec:cd:74:69:b3:af:dd:8c:
46:f3:4a:cc:05:e9:e6:57:ec:23:8a:69:da:9c:1e:73:97:aa:
3e:d3:e9:d9:d6:17:7e:3c:e3:e5:22:b2:33:fb:66:d2:0c:dc:
56:6c:e5:3c:44:18:f6:b5:83:af:e7:9a:da:fc:8a:1a:db:f0:
8b:f1:bb:b4:74:23:2b:28:20:36:a1:94:92:e8:8a:7f:b7:0b:
b5:c5:a9:68:3b:94:a6:82:46:dc:c6:98:40:cf:86:f5:75:bb:
1e:d2:84:3e:f5:98:50:4e:10:69:1d:5b:20:04:80:2d:b9:93:
b4:77:1b:1a:af:23:1a:e4:ab:9e:52:fb:c0:19:a5:ec:99:14:
ed:f9:16:11:f2:ab:f3:34:0c:65:96:60:02:1e:3b:cc:8d:38:
b1:03:13:34:b9:28:8c:a2:36:f5:c7:9f:cd:08:05:8f:30:ea:
ac:77:2b:a0:09:12:22:02:a7:8c:bb:f0:17:a4:71:77:7d:29:
ed:f6:ba:ff:3b:9e:a9:70:70:32:a2:32:7f:c8:70:d9:99:11:
d9:ed:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:59 2025 by rpki-client