Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: 4XiXbh1unYdjorNMH35EabLEU5ydfUTJRiWIfIUuhLM=
Subject key identifier: 85:57:5A:D5:D9:55:41:42:F5:09:D9:29:E5:40:D7:35:2E:1C:AB:EF
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 0198D5F139CB0872FD87B4F73B8AAA59C2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: 9JtCj9QCYJGgJr1gM0xTXaGRkedZQs3GpliHzElVeVs=)
2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:39:cb:08:72:fd:87:b4:f7:3b:8a:aa:59:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=85575ad5d9554142f509d929e540d7352e1cabef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:8a:a9:c5:b8:98:7e:c7:0a:2c:91:30:f3:
e2:2b:eb:82:22:e5:8a:dd:f9:3e:18:da:29:3f:20:
35:1b:11:27:d5:2c:4a:bd:1d:e9:c6:40:2b:e6:fe:
23:10:6d:89:f6:5a:68:57:c5:6b:d0:3d:94:ef:a9:
08:a7:31:0a:d3:73:b4:eb:e2:eb:1c:76:7f:7a:0a:
a6:60:ff:b4:66:76:6f:d2:f8:b4:5b:f0:59:9e:fb:
b6:43:2e:b3:6d:47:f9:f2:4f:d3:be:c8:58:ea:e2:
db:c2:09:b8:e8:4b:ba:96:00:8c:90:54:87:5b:07:
f3:51:b2:fa:53:07:f1:f9:6f:83:3e:6b:77:c9:a8:
e2:e7:19:44:7d:7c:12:eb:26:8e:7b:42:f6:d2:17:
60:29:bb:b9:da:41:d9:fe:08:9e:c0:9d:25:f8:5b:
8b:90:89:dc:c0:0f:8e:23:3d:f0:cc:ef:49:60:4c:
b5:a8:85:c5:89:74:ea:28:d2:0d:dd:84:3d:d1:39:
c9:10:fe:c3:8c:1c:fc:bc:d0:ef:b8:07:20:49:d6:
b6:5c:c5:c9:fe:cb:87:87:5c:b9:a5:f1:34:3c:95:
9f:60:62:c0:39:f3:e8:8b:77:a4:7b:6b:2e:a9:cb:
45:ec:4b:fb:e8:21:47:64:ad:c8:48:69:ae:10:6d:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:5A:D5:D9:55:41:42:F5:09:D9:29:E5:40:D7:35:2E:1C:AB:EF
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:e5:d0:29:f7:20:44:ff:69:c2:58:0f:d4:1d:92:7e:05:
b6:85:ec:24:b8:da:1f:b9:ad:30:d4:6d:a6:dc:23:e6:39:e6:
07:80:e6:d3:c6:16:96:cb:9c:07:e1:95:b8:ec:30:8e:d7:43:
a6:c6:59:d0:25:07:d4:57:ac:c4:50:4d:16:69:75:01:2c:47:
66:b5:db:c2:e3:78:ea:e4:e0:99:cc:b4:4e:2a:93:f2:4f:8a:
4c:17:8f:20:5f:de:29:5f:38:04:9a:a9:99:3f:d8:a9:7a:e9:
f6:c2:7f:f4:f7:41:43:bd:ef:01:c4:75:ff:9c:a2:ed:b8:11:
db:e5:e8:65:80:ed:58:57:87:e8:52:a7:d1:66:38:9b:cf:2e:
84:3f:7a:44:e8:90:52:12:ba:63:07:a5:83:7c:2a:8f:c2:5e:
23:4c:fd:75:4a:3e:50:8c:b5:74:e3:ea:c2:6e:3b:d1:74:1b:
fb:16:14:d8:1c:b1:07:b8:7d:47:35:b2:4b:97:5e:92:c1:46:
0c:a5:4e:4a:f8:c5:81:b6:48:8d:12:c1:0a:89:34:ce:08:6b:
f4:f0:8a:7f:67:88:6c:60:1b:77:ae:24:a0:b1:b4:ae:16:7c:
ee:19:24:c5:7e:88:8e:55:9d:98:25:3e:35:6e:62:50:ac:10:
a8:d7:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:25 2025 by rpki-client