Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: 0d4dguW14gXcUPYXL4hHB/aBCmhUIAUEOxF0mIfcXtI=
Subject key identifier: 94:D8:7C:1C:18:2D:43:C7:37:D2:E8:98:E8:37:63:C2:FA:38:3B:BE
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 0198D54EA8C50D28CEBBC2CF53664EC8FDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: tjditJtlTvovJehD26H6fOUQ5OSRTiCqitrUgWbeJLU=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a8:c5:0d:28:ce:bb:c2:cf:53:66:4e:c8:fd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=94d87c1c182d43c737d2e898e83763c2fa383bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:f6:25:90:61:95:2f:96:2c:10:14:29:98:
03:13:53:f7:92:74:ef:d7:19:3a:2d:c1:f5:aa:36:
af:37:24:73:4a:96:ab:2f:21:10:d3:3f:db:20:03:
91:1c:11:3a:e5:69:04:f4:28:04:11:36:89:f5:ad:
0b:60:32:4e:ce:d0:ed:0c:ad:e2:2b:95:7d:67:29:
a1:cd:be:1f:c7:0f:8e:f3:e5:6e:99:d9:c6:44:58:
f5:76:e4:6b:a6:bc:a3:b1:05:ef:be:36:0b:1d:0d:
89:60:02:22:3b:67:8c:c3:51:97:02:68:24:de:00:
e8:58:fd:a5:eb:8d:77:59:44:3a:ba:21:3f:c1:12:
b7:fe:93:15:d7:2f:90:89:eb:bc:f5:8e:bb:aa:10:
6b:3b:47:62:ad:ce:00:46:83:bd:d5:f1:b7:ad:e1:
a3:5c:95:22:88:0c:f1:78:e9:96:6c:f0:2f:89:3b:
f1:c6:0a:77:57:29:a6:f9:17:4f:16:2b:a3:3b:04:
ae:e0:b3:e3:e7:d9:e5:ad:d8:84:41:14:e8:c9:70:
5f:b6:51:ee:1c:a8:61:01:a6:d7:4c:8a:b9:91:01:
a9:39:1b:21:35:50:51:3f:3a:68:4a:09:bf:cd:72:
63:8a:72:6c:92:6d:88:84:c1:fe:9c:fc:04:5b:cc:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:7C:1C:18:2D:43:C7:37:D2:E8:98:E8:37:63:C2:FA:38:3B:BE
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:e8:2a:30:a4:ff:2e:7d:4c:16:37:b2:4b:19:e1:96:84:
97:3d:62:74:1e:31:be:a1:17:12:00:4a:5e:c0:2b:2c:9e:cc:
28:2a:4b:43:0d:93:ce:44:9a:07:83:f7:7c:90:e4:b0:48:2c:
69:a1:50:03:6c:29:70:ca:dd:cc:6c:bd:ca:94:6c:d2:cc:89:
1e:66:fb:10:1b:db:b7:2b:67:4f:81:fd:d6:ed:d6:48:11:68:
07:3a:0f:32:e2:7a:dd:f8:c3:30:86:ef:38:00:71:16:c2:79:
75:9d:0c:ca:c2:08:69:27:a8:da:a6:a8:cc:10:3b:6a:c8:0d:
a6:1b:e0:5f:95:d7:4c:59:47:28:0e:79:42:5c:03:a5:67:88:
fd:cc:22:db:97:df:13:86:2d:d1:30:5c:8d:e1:25:4a:25:b2:
2a:4c:bf:ab:e0:76:bc:69:83:34:5d:d8:64:5e:0e:16:06:1d:
05:b9:7c:fd:65:72:04:c7:07:09:6e:f6:46:4a:85:b6:96:ba:
e1:01:6b:d9:ae:b6:aa:fc:ea:01:fd:9d:26:97:46:5c:46:fd:
16:35:63:6c:aa:76:55:02:47:03:c9:7e:71:97:d4:0d:c8:25:
81:40:e0:2e:3f:95:eb:bc:c0:d6:19:4d:68:b6:1a:50:29:cf:
36:e8:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:58 2025 by rpki-client