Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: kfOnwSrCIGclbM6+4Je/Z3DTkXw/yBsgcjngUOTgGy4=
Subject key identifier: 89:9A:16:D8:67:BE:B0:57:73:B6:01:BC:24:C0:39:7E:72:5A:1F:BF
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0198D6CDB39E186541E17A41D54B3D7F5256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:01 +0000
Manifest this update: Sat 23 Aug 2025 12:01:01 +0000
Manifest next update: Sun 24 Aug 2025 12:01:01 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: TmIzhc86tM57Xox3jOPkT3qJ0KrOg3Locj0/mV7bm9c=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b3:9e:18:65:41:e1:7a:41:d5:4b:3d:7f:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Aug 23 12:01:01 2025 GMT
Not After : Aug 24 12:01:01 2025 GMT
Subject: CN=899a16d867beb05773b601bc24c0397e725a1fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:1d:3f:ed:a2:9b:40:ae:83:bd:c4:43:21:
4a:0f:52:da:3c:38:83:44:94:40:67:59:0f:08:55:
d5:e6:fc:4f:d5:bc:b0:5b:3b:a3:e1:01:bf:91:de:
9d:32:e6:12:9a:d4:07:fc:06:c6:4f:01:81:f5:6a:
ee:aa:44:69:06:f4:f7:b6:40:46:12:5d:44:b9:9f:
80:25:3a:90:1c:0f:4c:b4:b6:75:b4:f6:09:aa:b7:
a3:ea:f7:5b:11:92:da:62:a2:a8:0e:5c:c4:b5:df:
9d:64:c7:77:d7:17:27:e8:01:59:21:2c:55:5e:59:
44:93:2b:39:02:8d:d7:42:c7:cd:95:f1:96:5b:54:
01:77:ae:2b:92:0a:5a:3a:97:0c:a7:46:25:cb:3f:
e5:b3:7f:23:01:5b:25:ce:06:3c:bf:03:69:e6:12:
11:4f:c3:7d:a0:da:33:6e:36:f0:16:9d:5f:58:84:
8a:ba:25:62:31:85:2a:fe:df:66:95:0d:5b:54:79:
9d:41:7d:7a:0c:c0:b2:c0:89:57:1c:88:e2:8b:b6:
80:02:37:63:8f:d0:e3:74:2f:9f:c5:f2:3f:97:ac:
9b:5b:af:8e:02:f5:97:06:af:56:9f:a6:83:cd:fb:
02:72:ad:50:d2:db:be:93:c7:3f:a3:a3:f7:55:3e:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:16:D8:67:BE:B0:57:73:B6:01:BC:24:C0:39:7E:72:5A:1F:BF
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:69:17:87:3b:ae:b5:e0:c3:8d:f4:11:23:26:62:aa:77:e1:
53:c3:b9:b4:fc:2e:9b:b2:54:1d:56:8d:d6:71:d8:1c:5d:1f:
b7:b3:3b:bd:2c:eb:2d:bc:bc:de:a3:00:9d:2b:a4:c2:5d:b4:
93:6c:81:a1:4e:ea:09:d8:70:37:40:86:08:2c:12:b0:25:6a:
8a:98:68:81:fc:f5:94:9f:41:d6:96:b0:ac:96:7a:89:2a:64:
89:a9:f8:97:e6:0f:58:2d:c5:15:b1:9c:7c:3d:f8:df:f0:cc:
c4:b3:21:4d:88:74:4e:03:77:6c:a4:14:08:cd:ac:3c:f1:3a:
74:27:08:e4:73:66:1f:6e:7e:7f:9e:c1:5a:f9:0c:4e:02:d0:
33:3e:6e:6a:02:32:2c:44:be:f5:e4:57:5e:b6:03:11:86:d3:
67:25:9b:f2:b9:22:83:0c:db:07:b0:eb:29:a9:9f:8d:9a:5a:
2e:1b:46:c5:2d:2d:55:07:fa:46:b8:89:23:3f:72:db:3a:91:
c9:c0:9b:9f:9e:79:39:69:5a:a5:ff:d1:76:80:2b:fc:bf:28:
1d:2c:b7:3a:5c:67:0f:30:8a:00:96:a4:48:f3:0d:05:bf:be:
ce:a4:fd:2c:4e:2a:9a:21:e0:13:77:22:0a:ae:76:12:8f:e6:
de:88:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:47 2025 by rpki-client