Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: WcPpD0fpWJfaF3y3fAO7gxUpXE4BC58pgMSbJs6s708=
Subject key identifier: B2:65:07:CA:93:E4:19:E9:82:3A:DC:93:DE:07:1F:44:02:60:DB:09
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0198D7059D58855CBB6428B4C35772C9031B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: Cstup8W0gQ99IgyMB2fW8dqJW0tXmI/H9OD9GccrKRc=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9d:58:85:5c:bb:64:28:b4:c3:57:72:c9:03:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=b26507ca93e419e9823adc93de071f440260db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:65:3d:b9:3c:36:ea:d1:ae:ad:41:dc:a9:
d2:22:fb:09:6d:4b:18:7c:4d:8f:d2:7e:c9:96:e9:
17:c1:73:65:56:15:4d:cb:62:9e:e1:82:a6:41:25:
d1:9b:60:5b:6e:47:17:0b:f2:77:51:bb:87:47:54:
e0:c9:42:96:88:eb:36:08:3c:df:4d:1b:b4:14:26:
4f:cc:9a:9d:66:5a:8c:1f:20:f1:dc:5e:56:b8:cd:
2c:be:e1:a7:5b:3b:53:a9:28:44:13:18:04:4b:fd:
a6:24:9e:1e:cc:80:f3:2c:09:08:e1:e4:d3:4a:2f:
ca:91:41:0b:ff:0c:74:cb:9d:fa:ea:b7:67:af:5f:
2a:c1:4f:d2:54:d1:af:0f:f7:a1:af:6a:a9:40:cb:
7a:55:04:f4:35:44:c6:cb:c7:48:d0:63:55:13:10:
c7:1e:b5:81:56:a2:73:d2:9d:a0:49:5d:60:b9:e1:
26:20:0a:04:70:0d:68:bd:7a:ef:bc:f8:ba:36:91:
f2:59:22:da:e4:dd:c2:5c:cd:a1:dc:fe:b7:fd:9a:
6a:a3:d9:a9:8d:6c:87:d1:c2:d7:10:ee:e3:21:68:
2d:4d:a4:8f:90:72:b4:ff:f8:11:47:08:1d:da:09:
a9:f7:d2:1f:42:40:ac:6b:a5:e8:94:de:5b:d2:70:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:07:CA:93:E4:19:E9:82:3A:DC:93:DE:07:1F:44:02:60:DB:09
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:38:3d:bb:1e:6b:cf:97:6a:5c:5b:f2:b9:ab:b9:ea:2f:
f5:88:1f:4e:05:b4:b8:ab:61:f7:82:45:94:79:e8:8e:1c:62:
99:e3:25:99:f8:18:c5:f8:12:88:2e:9e:cb:13:11:71:ab:d2:
c8:50:52:16:2b:b2:c1:79:85:b3:ac:42:e8:9e:73:ae:07:6b:
d4:dc:5f:3f:84:ae:66:5c:cf:61:88:40:5b:e6:bb:78:a3:0a:
60:95:5d:ed:89:8c:8d:f7:52:74:40:95:d2:f2:25:55:34:ed:
1f:64:7e:c6:26:54:66:a0:87:56:e9:63:2c:6e:46:de:b0:e0:
dc:c1:83:9f:a7:70:b4:cc:12:e0:73:eb:7e:dc:c7:aa:ac:30:
b8:18:66:33:29:78:6e:c6:12:78:b6:20:f8:68:f8:e7:14:6a:
d2:7b:29:9d:ee:31:38:a9:b6:35:31:fe:84:7f:08:3a:e0:39:
10:28:69:b2:9a:b0:25:df:6c:44:1a:9c:58:c8:3a:ce:e8:0a:
63:00:ac:bb:2a:8b:68:48:60:9e:00:78:ca:e6:e0:73:ec:fb:
59:3f:fa:66:f7:fe:97:4a:98:30:f8:b4:e6:00:94:33:f2:84:
8a:ed:86:fb:7c:45:4a:f7:36:fb:78:23:76:ad:42:d6:e2:91:
1b:2f:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:05 2025 by rpki-client