Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: dy9X5mJKpEaNVt4B92QEeIJWCdGoKwfBnq3H2l6IZtY=
Subject key identifier: 68:84:DD:92:E5:2C:C3:8C:58:B7:BB:E0:EB:39:93:1F:AF:F8:5F:4A
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 0198D5BBFD1E523C01E8E0B50AAE518A1DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: w1JKliXfEuBFpKq/gXbpnnP4B2c8DWmIQ3mwvcHaVuY=)
2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fd:1e:52:3c:01:e8:e0:b5:0a:ae:51:8a:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=6884dd92e52cc38c58b7bbe0eb39931faff85f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:13:90:0c:cd:0b:58:ac:4d:dd:5e:9c:b0:
36:a2:6b:49:17:6c:db:1a:06:a5:8f:0a:a5:55:42:
00:62:5d:81:58:33:26:92:38:d8:64:da:60:cc:03:
85:b8:df:b8:cd:13:d3:82:ef:ad:f2:26:96:e8:96:
84:56:8e:e7:2f:50:eb:40:9e:63:af:d6:f8:fe:59:
78:92:30:83:55:d4:83:1d:2e:72:25:b4:6e:d8:11:
f1:77:1e:63:76:61:40:33:c7:bd:99:2c:ae:34:0b:
c0:ba:a1:4e:81:44:e5:c4:03:d6:a9:00:01:27:1a:
f5:c2:82:6d:14:b8:ba:a4:0e:8a:51:36:f9:33:66:
bb:09:35:f7:0e:6d:51:9f:5a:65:5d:e5:c5:b7:6d:
d9:76:be:87:dc:42:db:5f:9c:16:79:80:ca:1f:ee:
f5:c1:55:7a:09:cf:00:29:db:ed:87:46:73:9a:14:
16:97:74:ff:90:f1:32:60:a0:b8:cc:92:ae:5a:f3:
68:ab:90:14:0d:88:41:90:e3:96:c5:81:79:ae:4b:
9c:3a:4c:54:65:c2:51:0b:f7:99:55:ab:21:d4:cf:
9f:90:08:26:56:e1:cb:2e:c1:33:68:16:ef:b4:5a:
80:1b:1a:49:3b:51:68:98:72:4c:fe:e0:ea:2b:e7:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:DD:92:E5:2C:C3:8C:58:B7:BB:E0:EB:39:93:1F:AF:F8:5F:4A
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d5:14:85:f4:83:ae:a1:da:7d:b4:50:a4:c9:ef:58:94:3a:
c9:bf:26:82:e2:c2:2f:9d:b8:8b:82:6e:3a:ca:55:cf:b5:0b:
1c:be:3c:66:2b:88:b4:75:94:10:0d:36:80:50:ec:ae:64:d8:
92:c6:1f:42:69:da:3a:4d:c9:e9:51:8e:6b:c4:76:ce:41:87:
98:3a:42:bb:bb:2b:b9:37:e1:19:f9:fa:5c:d5:2e:a6:f8:66:
40:dc:5c:78:20:e3:f3:5c:f1:d0:e4:f5:f5:31:ac:f0:1d:69:
dd:53:94:76:c2:e4:63:23:ac:95:69:0f:8e:f1:e1:23:28:87:
02:71:b4:28:2e:44:83:ab:99:81:9e:e7:df:72:37:ee:fc:e5:
0a:2e:c1:54:53:c4:7c:31:aa:7a:69:6c:96:4b:23:60:8b:a0:
90:b8:e0:4d:b9:73:84:a2:9f:31:9d:90:e9:5c:f2:d1:0c:80:
83:f7:90:34:ff:23:8b:2e:42:7e:91:47:92:26:d7:66:34:50:
75:0d:a5:f0:93:f2:73:dc:1a:8d:bc:e0:bd:69:f8:fc:b9:11:
ad:71:cb:62:f6:6d:f5:d1:b4:84:44:cf:d7:3c:cf:a7:93:4c:
46:38:ca:b9:2c:21:b6:72:5b:3b:04:5c:1f:ee:2f:65:b1:74:
a2:c6:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:54 2025 by rpki-client