Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: Wc0uCg/ANhu/WZEYVHjJZsl08pXPTVs7q5jflmVbTAo=
Subject key identifier: AE:44:57:C9:8F:E2:08:4D:B1:6C:2A:64:91:75:FB:C5:CF:87:CF:D4
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 0198D5F11AE43996992DFE852BE3FBE4D4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: mmpdtdza/6S+fWrEX0fhd0QgERyxnr/Dl/8e2PTuPis=)
2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1a:e4:39:96:99:2d:fe:85:2b:e3:fb:e4:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=ae4457c98fe2084db16c2a649175fbc5cf87cfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:ff:f2:7c:cc:60:70:b0:dc:89:53:d3:3c:
d1:16:41:cf:21:ef:b5:1b:a4:0c:2b:cc:c4:42:cf:
46:5c:2e:69:b3:79:9f:d0:5c:dc:f4:69:be:e5:55:
48:a4:12:74:9d:d9:9a:ad:be:b4:98:5b:d4:61:26:
85:0f:51:3a:83:d0:47:ac:b6:a2:93:92:4f:ba:e9:
13:9d:29:4e:1e:83:73:dc:ca:f3:26:fa:9a:a1:69:
f9:7f:dc:ca:b6:2b:0b:df:c3:b3:bc:b2:c5:b1:c9:
ba:35:dd:af:38:d3:38:5b:bd:32:b7:c8:64:36:01:
b4:99:ab:83:e0:0c:22:12:88:54:e5:1c:aa:8c:ff:
b6:18:1e:eb:e7:72:08:50:c0:4a:7f:25:bc:b6:79:
a3:37:16:78:df:76:31:77:d0:ce:78:74:9f:36:7c:
d9:05:8e:f4:ef:ba:3f:7c:65:45:59:7b:69:15:0e:
c2:3a:6a:2b:5d:e7:22:07:8f:9f:99:0a:55:2d:e8:
eb:bc:d0:8d:48:27:46:68:3d:03:95:0a:4c:53:3a:
3f:7d:ef:06:58:96:e9:0d:ea:7b:b5:03:d0:45:0d:
84:da:c2:1f:54:dc:dd:96:6d:a6:c1:d7:51:7e:42:
32:1f:04:d2:c9:be:d7:cd:87:49:9e:78:47:a0:56:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:57:C9:8F:E2:08:4D:B1:6C:2A:64:91:75:FB:C5:CF:87:CF:D4
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:69:98:81:86:0a:6d:12:c5:62:ea:76:4a:38:8a:f9:27:13:
4b:6c:29:f6:e1:b8:52:8f:e4:67:f9:48:22:3e:61:ac:da:da:
d3:4b:1d:68:40:ba:8d:a2:36:70:90:ac:aa:2a:d0:1a:f2:6b:
12:04:a6:7b:ff:87:99:30:6e:b0:52:24:88:10:15:f3:40:28:
96:24:76:d5:cf:89:8b:52:49:34:7e:95:67:a9:22:9a:b1:b9:
60:05:53:03:eb:dd:8d:8a:b2:9b:3d:eb:3a:73:e6:03:fb:12:
ec:dd:08:83:4f:ea:ae:1e:ea:c8:cd:73:0a:06:b1:6b:5f:17:
38:4e:b8:c2:4f:77:3e:0c:0d:cf:91:02:9b:dd:9f:20:89:cd:
64:43:ad:ac:64:02:f4:38:09:f4:9c:75:1e:51:16:9b:38:70:
71:82:13:b1:00:bf:60:a6:5a:c9:75:db:39:91:74:bf:63:8d:
24:22:3d:a0:46:45:4d:68:3a:4a:8e:39:94:a9:ac:5c:60:3d:
25:51:d3:7e:57:6f:5d:e1:60:0d:97:77:25:41:66:48:de:0b:
75:d4:cf:54:0d:01:0d:48:cf:9c:07:57:3b:46:bf:c9:eb:98:
7f:45:9b:5c:16:ec:1f:21:ab:b5:a0:3c:f9:7f:28:bb:39:e9:
79:22:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:10 2025 by rpki-client