Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: +o7zeoZAe12eBxrKtmWmZM2AvuGCaLxYKtp97ZeMw9Q=
Subject key identifier: 2C:E2:88:6E:69:C0:5B:F7:A5:6D:B2:FA:6A:D4:86:01:2A:D0:1B:0C
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0198D65EFB9CE81D13E637A58A21D1D383CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:05 +0000
Manifest this update: Sat 23 Aug 2025 10:00:05 +0000
Manifest next update: Sun 24 Aug 2025 10:00:05 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: 2jqwzR7ubK+hxJvgZOdEhCh74F6iIhlt/lT0OoKJsn4=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fb:9c:e8:1d:13:e6:37:a5:8a:21:d1:d3:83:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Aug 23 10:00:05 2025 GMT
Not After : Aug 24 10:00:05 2025 GMT
Subject: CN=2ce2886e69c05bf7a56db2fa6ad486012ad01b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:cb:8c:45:b7:74:96:c1:0b:18:e2:b2:bc:
86:eb:81:bd:11:4e:9f:79:69:1c:ed:d9:24:a6:76:
0f:3f:1a:89:f1:1d:82:72:d5:b9:ee:e5:bf:57:d3:
45:d2:7f:54:03:d3:85:a6:fe:8d:3e:4d:61:67:f4:
db:00:3c:05:c8:ec:e2:d9:02:96:b2:0e:9e:08:eb:
10:c2:f3:f7:16:03:2e:3b:8c:13:82:b8:5c:da:de:
79:2c:4d:32:4a:37:67:f1:67:5c:39:0d:25:15:fa:
71:18:63:e7:aa:cc:3b:1d:e8:c0:46:3b:ea:bd:a8:
b6:e1:ef:be:48:3c:0b:85:24:d1:ec:08:67:17:ba:
7f:d9:f0:8d:71:ff:ea:bf:63:06:e5:20:b6:22:4d:
2a:bd:bb:c8:be:d2:c8:d7:5b:5b:3c:85:16:9b:a1:
8c:04:87:73:c4:1e:2d:4d:ed:ef:ec:ea:23:91:f9:
5e:a1:d4:df:a7:fc:cb:cb:e9:6b:1c:5d:5f:f5:ec:
d9:db:17:af:30:23:f3:c2:71:ab:49:96:6d:1e:5c:
d2:81:de:e9:33:1a:61:b1:12:fc:32:a7:48:30:22:
2d:e0:9c:78:46:9f:8b:cb:3a:77:48:c9:45:4f:43:
57:d4:cd:a8:70:b8:55:64:a8:de:c3:4a:41:c8:b1:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E2:88:6E:69:C0:5B:F7:A5:6D:B2:FA:6A:D4:86:01:2A:D0:1B:0C
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:62:ba:68:87:d4:8f:45:d0:eb:d5:d7:cf:8d:cf:74:3b:
ca:8b:d7:ce:1c:5f:15:49:54:97:7f:39:34:04:a2:c8:e4:75:
06:9a:2e:0c:fd:60:9b:c5:1f:ac:8f:d3:a9:23:27:fe:ca:d4:
f8:e2:fe:84:c5:aa:4e:a7:07:4c:a3:70:cd:8d:36:e4:29:c1:
12:23:d3:80:20:de:76:05:61:56:29:ca:bd:16:04:70:c0:dc:
60:a0:e6:97:42:3a:d2:03:a3:a9:c7:7b:ee:cc:02:80:9d:56:
22:9c:63:42:49:95:26:17:0f:90:0b:9a:24:08:7e:7e:fe:5b:
93:34:a4:82:9d:cb:b1:9e:24:7e:bc:61:be:fe:b3:55:c1:54:
de:c6:aa:63:2e:18:f7:9e:f8:b3:86:3d:ce:32:df:a8:23:62:
ea:c7:f6:b4:c1:2b:b4:72:1e:b5:5f:ef:ed:dc:79:a0:be:ca:
8b:f9:41:71:f3:a6:5b:a7:e4:9e:05:31:78:2e:c9:5f:40:ab:
6a:df:4e:e3:f3:61:7b:54:58:e7:89:f9:f8:6f:96:a1:66:20:
6d:98:01:eb:27:11:e9:f5:44:cd:12:2b:db:cf:6d:55:e2:40:
f9:bf:14:f3:19:c1:73:cf:16:10:47:b9:d7:8b:a8:2f:e4:ad:
17:d1:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:11 2025 by rpki-client