Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: Kg6peu7rFva1SCaRRDSqyKOkj1Ac5w+8aS69CWkYH9Y=
Subject key identifier: 1C:59:E9:F0:60:DB:9B:71:86:30:5C:BE:30:D5:64:CE:C4:D2:AE:59
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 0198D4739D865D27B7331034394CDA452D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 0FC4
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: 0H+d5RVaf1IYD8jt/9ov9kA7IlqrgLGyoMxSKEgN1oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9d:86:5d:27:b7:33:10:34:39:4c:da:45:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=1c59e9f060db9b7186305cbe30d564cec4d2ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:57:c4:d4:f8:43:17:66:8a:a3:bb:62:22:
80:28:94:d7:62:c6:de:d0:b3:01:24:9e:08:6f:ef:
b6:5d:ee:ca:e5:08:fa:4a:50:8a:3d:52:d4:0a:ec:
f9:4b:a4:93:bc:59:7b:a0:b5:42:a7:76:37:a6:30:
14:44:b8:fe:61:1c:45:a4:6e:37:d4:2c:82:07:6d:
39:a1:b3:1a:aa:c2:ee:0e:8e:b4:19:57:25:74:58:
61:fe:f5:83:31:50:98:d3:01:56:f8:8b:4d:f2:f6:
c2:2c:6c:62:ed:19:ae:42:86:75:01:74:f4:6d:e8:
50:a4:3d:18:ed:df:b9:c4:3e:08:63:f0:f3:ac:35:
e1:8c:35:8a:e8:54:cb:63:d1:bc:08:d8:34:ca:00:
bf:fe:97:18:66:c7:45:2f:f6:02:11:de:dc:d8:8a:
7a:02:67:ec:d9:ff:6f:7d:6e:29:64:a4:9d:ab:cd:
37:41:50:4a:51:b3:ce:f6:46:5a:fe:ce:08:4e:4b:
88:5a:89:94:69:b8:c4:2c:ab:38:29:da:9c:8a:e4:
0f:ab:69:af:a7:7c:93:a8:d2:ba:6f:29:48:c6:bd:
db:29:5e:65:e0:91:66:47:43:55:68:3b:c8:2f:7a:
46:4c:c4:8e:72:ff:02:2c:20:76:87:18:d2:9c:ac:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:E9:F0:60:DB:9B:71:86:30:5C:BE:30:D5:64:CE:C4:D2:AE:59
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:32:6a:f0:bf:5f:4e:ab:05:6e:28:d4:93:64:03:6e:cc:
28:c1:bb:54:21:b2:b4:53:a7:02:4a:05:61:c7:f4:61:68:42:
53:78:95:87:73:bf:8d:0c:13:be:bb:3f:a8:a7:6b:d2:aa:a7:
11:26:96:5a:37:46:d9:f3:94:16:89:99:08:3b:0e:dd:c7:56:
e1:c3:e2:3d:01:57:fb:fd:b8:b7:f9:3e:6a:ab:8e:e1:e7:17:
33:20:c8:ce:5c:90:b5:3d:1a:b0:5c:2a:50:3d:82:93:ff:36:
8e:a5:c9:0e:34:7b:2b:1c:75:4f:71:5c:c1:10:6c:e7:75:4e:
bd:00:26:91:1a:a0:bd:ac:1b:e8:87:af:30:93:14:b0:7f:c6:
d7:ae:3b:9d:b2:83:af:c2:d4:b3:33:67:15:bb:b9:e9:da:27:
d8:f3:38:21:02:b4:1f:4e:a9:7d:2b:15:73:b1:06:df:84:26:
76:20:33:a3:42:42:1f:b9:66:8f:4b:4d:1b:d3:e9:fa:50:5c:
69:a6:30:ad:32:4e:a0:ff:b7:0e:fe:be:fc:4f:42:f2:43:7c:
41:08:d2:15:88:ed:5b:a8:5b:da:32:9d:0c:2b:ac:8f:b5:f6:
83:1f:a3:46:d4:2f:1f:5d:d8:37:c6:aa:f4:d1:68:20:d4:c4:
b6:5e:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client