Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: X0vDG9Bnvoh3MvTz73D+bqHdI20mbaBPgC06rRXFipE=
Subject key identifier: F8:EC:D8:3F:E5:92:72:35:65:F3:17:73:A3:3B:2E:63:1F:87:2B:A9
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 0198D65F57E3235A63B1946AA3A6B43F6FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 6A
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: 828ALhRUkoagwtzoax9u+50BTPk9B5LhN8UyzZGcSlY=)
2: O55FnDiUhMsPTi6hjIewBuX7Ta8.roa (hash: 3JNSAI/aVMRICcZVLh9uXFKqAHc+rCKXfwm9TEvUz2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:57:e3:23:5a:63:b1:94:6a:a3:a6:b4:3f:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=f8ecd83fe592723565f31773a33b2e631f872ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:4e:3f:ed:bf:71:39:d1:9f:b0:3b:16:29:
e7:dc:28:92:ba:86:27:04:c5:6a:eb:c5:c6:1e:56:
73:76:d7:56:49:bb:30:ea:0f:8d:c7:4b:4c:b7:d8:
c4:9f:00:7a:7c:32:3c:fa:ec:c4:dc:fa:5c:78:5c:
d4:cb:e2:ee:4b:09:3e:2e:4c:84:59:1e:78:54:d9:
11:65:9d:0f:57:f5:4d:e1:9b:c1:bf:10:3d:39:5e:
5a:5d:30:f3:dc:9c:99:66:fa:51:bf:0e:8e:92:a4:
65:dd:4f:21:51:43:c1:f3:47:23:b1:32:21:db:0a:
d4:13:4b:2e:ac:ab:48:23:bf:5a:6f:0f:20:1e:6d:
fa:2b:1c:2f:75:03:63:41:74:6c:1c:f5:26:47:03:
53:23:e0:fa:b4:64:7e:8a:44:f4:2f:bb:46:10:39:
df:00:36:57:1e:6d:90:94:05:12:d6:8e:b1:3a:4b:
19:3b:1a:19:d7:d7:69:7c:64:1c:e9:74:e1:76:ec:
dd:d7:40:5f:de:e9:72:af:79:c2:1a:40:5a:69:44:
79:73:b5:54:cf:b3:d3:87:1f:a7:50:47:b1:9b:7b:
a7:9d:e6:d7:3d:75:dd:9b:7b:50:d1:72:cb:ba:f6:
78:77:75:be:35:e1:ae:cb:f4:69:3a:26:e1:ad:cf:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:D8:3F:E5:92:72:35:65:F3:17:73:A3:3B:2E:63:1F:87:2B:A9
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3c:d3:26:7f:5e:79:b6:d5:92:2b:e5:0e:24:18:d5:7b:a9:
d1:74:bf:c2:e9:be:8f:ed:9a:40:9e:ee:13:80:d5:73:f1:2c:
84:71:94:e8:8e:b7:9e:12:47:88:8c:02:89:1b:bf:f6:04:8b:
6c:f2:9a:d6:89:e4:53:d6:bf:40:1e:2d:14:b2:1b:ef:1f:2d:
c0:76:af:a9:68:48:dc:41:07:fd:94:10:26:4d:91:1b:1f:5e:
da:4e:cb:e4:b9:4d:2c:4c:a2:87:ff:16:ca:1f:61:44:dd:ea:
0f:61:77:56:f2:3b:aa:7d:9e:b8:3e:cc:48:b0:bd:3a:1b:e3:
8b:01:3c:d1:91:17:d8:71:3e:19:2a:33:fe:bf:e8:ef:e2:b3:
65:d4:7f:ab:0c:52:77:74:9e:eb:25:ef:d4:f9:63:96:21:a4:
df:02:09:3b:4a:db:dc:1e:56:7a:01:fb:05:86:ee:37:5c:be:
75:27:48:95:1c:54:3b:5f:51:3f:99:85:09:1a:5e:9b:29:3e:
67:82:9e:7b:68:21:d7:b5:8a:25:24:12:fe:5c:03:a6:aa:30:
81:13:ae:83:97:95:45:1a:c1:53:bb:04:b9:6a:78:84:26:bc:
c0:a6:36:26:6d:64:38:6e:d3:8d:bf:2e:e8:a9:f6:79:55:3c:
ea:8d:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:15 2025 by rpki-client