Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: EmcnwTqqWmgWCdcVGgTjZMvhSy2GGYjqe7FEDMqKnDE=
Subject key identifier: B6:21:95:86:40:1A:74:52:CE:CD:6B:FE:C9:52:DC:17:2F:92:A9:4B
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 0198D5BC08F55144574D56B56F253B2B444F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: K7rkZbRs9napgN8lBRmq7C8tar+JnfvOKCuOaYX7t9k=)
2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:08:f5:51:44:57:4d:56:b5:6f:25:3b:2b:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=b6219586401a7452cecd6bfec952dc172f92a94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:44:33:aa:79:ff:c5:7c:54:f9:a7:6d:32:
73:62:a5:64:6d:74:5c:cf:1c:5d:5e:15:97:1f:b1:
44:52:b6:23:62:45:1b:74:34:23:72:66:35:96:7b:
e1:6f:04:3e:a3:ad:cf:a6:f3:6b:8a:cb:b4:a4:48:
ee:33:48:9f:67:ee:67:73:8a:7e:93:47:c4:23:45:
44:4d:6e:8d:9c:c7:18:bc:e7:c2:d2:61:48:d2:79:
e5:b7:7b:a4:eb:ba:84:e2:6f:4d:7b:33:b9:1e:d7:
27:d3:0e:c7:c4:77:a5:69:60:7d:8b:cc:59:4b:9b:
22:61:c7:44:c1:51:61:a4:a6:80:de:17:69:4d:0b:
00:40:67:89:0e:f9:6b:09:4e:bd:5c:c3:a1:39:57:
e3:51:95:7d:22:10:e0:ea:05:32:8d:9e:03:9d:72:
e2:75:c1:e3:43:9a:46:59:4d:f3:be:71:46:aa:79:
dd:2f:dc:1c:18:e8:3d:84:26:59:d2:7b:f1:43:5d:
65:44:1a:e0:e2:ab:10:d6:69:31:45:56:8a:e8:c1:
a1:dd:9f:22:fb:87:d3:8b:da:76:1e:94:44:94:ac:
46:89:f1:67:5f:7d:9b:d8:8d:64:36:72:89:2e:a0:
06:ad:1f:f3:e3:b4:7a:9c:99:f0:6c:4a:12:7b:64:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:95:86:40:1A:74:52:CE:CD:6B:FE:C9:52:DC:17:2F:92:A9:4B
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bd:15:10:51:55:cb:80:04:48:b9:b6:0a:05:d0:fc:e1:cd:
74:c7:7d:3a:02:24:48:94:01:c2:0d:fa:a1:39:7d:eb:f0:8f:
c8:48:2a:90:d9:02:3d:27:f7:1f:68:75:d8:8a:36:25:47:46:
2f:ca:62:39:b3:86:f9:e5:2e:a4:ac:bc:fc:71:bf:ea:9f:e4:
d2:fd:97:c5:d2:36:fe:87:b0:90:f9:cb:37:ae:e3:dc:22:2a:
e3:e8:87:d1:8a:9a:1c:14:da:1a:93:ba:9f:80:51:92:e0:84:
c6:99:4e:53:1a:be:f2:9c:22:ed:6a:e3:d1:5a:2e:d9:44:56:
82:31:33:d9:a9:c5:04:33:ed:43:fc:38:82:26:1f:41:9a:c3:
6b:a0:68:75:1a:24:68:56:f8:f3:16:8a:1c:cc:90:56:b0:fe:
89:6a:9d:03:3c:42:ae:dd:dd:a8:cf:cb:b9:1c:e3:14:38:6f:
42:92:24:a3:a7:2e:c8:38:8a:7d:76:dd:c8:ae:3c:c3:b5:f9:
65:d0:46:9e:07:6e:b7:99:9d:26:02:e7:f6:ed:92:aa:86:ba:
d2:f4:0b:a1:23:1b:ed:32:fe:16:91:97:34:c3:85:28:9b:60:
5d:50:7e:eb:62:99:42:b5:9f:fd:eb:c7:98:74:e8:05:85:65:
2a:ca:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:50 2025 by rpki-client