Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: kMcBMk4nwVXD1nqwqT0uf7qpLgCX4CWezIB45ps5Eb0=
Subject key identifier: 31:4E:F1:FC:9B:DC:B3:EA:EE:56:8E:4E:67:9E:0A:2F:78:19:9F:85
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0198D5158BAD6A4A871FAB646B71D590BB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: j14psqEOQGJI1/sKb/LMvIFai5Lu87d1mlNSZbtVm1s=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8b:ad:6a:4a:87:1f:ab:64:6b:71:d5:90:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=314ef1fc9bdcb3eaee568e4e679e0a2f78199f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:1d:28:ae:d1:26:e6:26:dc:94:77:a3:ae:
b7:35:eb:ea:8c:ee:42:f4:8f:88:f9:b8:a9:cb:23:
0d:2e:d6:ce:ce:ef:6d:2f:4b:42:80:b3:63:dd:b4:
e4:c9:14:ea:a9:1d:61:62:ca:61:e1:06:1e:49:12:
9d:fa:a7:2d:51:46:b9:f9:a0:04:7c:e5:3b:d7:18:
24:0a:1c:f1:22:7b:80:b2:6e:1f:c4:ce:af:f7:72:
cc:ce:f1:b2:14:dc:b4:63:34:67:24:69:c8:07:ba:
56:52:20:a8:e6:8b:ac:08:fa:76:53:43:e8:4f:1f:
53:19:af:a1:11:97:c6:bf:64:16:ad:4e:40:a6:1a:
2c:bd:c7:23:b8:d8:c1:d9:20:c4:0b:ce:df:42:9e:
9a:f8:3f:9a:07:56:6b:72:70:72:3d:d2:ee:0c:3a:
9f:51:ab:d6:d8:10:92:20:14:bb:40:ab:d4:66:49:
eb:df:d2:56:c9:cd:7a:80:ac:2c:e6:52:18:57:55:
db:d5:b2:36:c6:28:a2:80:5e:f7:54:b9:a0:71:da:
bb:32:82:2d:82:5c:0d:18:88:f1:20:69:3d:d1:9d:
ee:6d:32:97:00:08:9f:2d:cc:b7:f0:5b:cc:5a:45:
15:9b:38:e5:80:28:2e:71:6e:da:e3:3b:92:d2:4d:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:F1:FC:9B:DC:B3:EA:EE:56:8E:4E:67:9E:0A:2F:78:19:9F:85
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:56:a8:fa:27:34:cf:40:2d:24:37:cb:df:b5:12:7d:a5:
c0:9a:9b:63:5d:84:90:39:66:e1:ff:b0:2f:e3:7e:69:4e:67:
f5:7e:4f:40:2c:f6:b9:85:df:74:1b:bb:5a:94:2e:08:eb:b3:
5d:23:c6:04:09:7b:e5:fd:6e:c8:88:a6:13:7a:c0:8e:3a:ea:
26:c7:53:68:20:1c:28:0e:ff:67:33:2b:e1:7d:58:13:1d:64:
be:f2:38:a4:ea:5e:72:8f:36:5e:76:f3:04:2d:94:73:52:d0:
06:24:47:a2:a9:f8:ea:46:fd:11:73:20:36:8b:f1:df:08:fd:
2d:b8:83:b2:0a:c8:76:90:c4:b8:27:44:50:07:e3:f4:05:dc:
12:f1:29:bf:df:c9:2c:7a:5d:09:11:a8:14:c3:5a:74:3d:9d:
04:23:09:17:04:df:a0:f2:3f:33:cc:81:79:e4:c1:2f:75:1f:
4e:d3:8a:03:02:98:35:c0:9e:7c:a2:c4:4e:47:e4:0b:a3:62:
49:68:98:68:f1:a5:34:34:c7:03:4d:a3:b2:49:7b:19:52:7b:
5c:fb:f7:0d:8c:94:01:29:c7:a1:42:ab:84:55:5f:7f:04:1f:
1f:f6:a8:b5:f7:b9:80:58:11:8f:20:0d:1a:0a:d4:a9:6b:82:
90:4f:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:41 2025 by rpki-client