Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: UO79Cy9duaUu/pexAzdoDIQC3aGZS4zJMm9ieC9cPVA=
Subject key identifier: 00:D5:82:81:C9:7F:53:35:1F:E2:10:DE:FE:74:A5:CB:4B:44:FB:EA
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 0198D4736D25EB773A4406414DB480A07252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: 2XfXF4oX4xoooLAXojhDhLtEtN7ydKnST5okNnuzAbA=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6d:25:eb:77:3a:44:06:41:4d:b4:80:a0:72:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=00d58281c97f53351fe210defe74a5cb4b44fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:82:59:7d:2e:12:99:f4:4b:94:dd:c7:b1:
f8:39:0b:ed:2c:e1:52:9d:d8:be:14:ff:17:62:8f:
2d:64:5d:51:37:38:bd:84:aa:77:ab:e8:85:93:2a:
15:e4:4d:a0:43:5b:bb:ab:37:2a:4d:68:bb:ad:2e:
dd:81:29:0b:a3:ac:7f:ba:5c:e2:8b:bb:36:4a:08:
d4:cb:5f:ca:6d:3c:55:7a:ad:29:2c:1c:73:71:12:
0e:04:bd:58:7f:a5:b6:f3:99:c2:c0:40:66:26:bf:
ee:08:8c:9a:64:5a:7d:0c:db:bd:3d:9a:1a:8d:d1:
ba:c1:e9:6e:28:68:35:6d:df:4d:f7:fb:df:9c:86:
14:16:14:6d:78:32:9a:df:c6:b5:a1:9e:33:43:6a:
72:55:d2:81:7c:ca:8d:ab:ba:03:be:39:f3:c2:b3:
99:48:e9:db:6f:68:6c:bc:6e:6f:20:5b:0c:97:a5:
9a:be:05:f1:4a:f0:e1:18:0c:97:af:44:38:17:83:
a2:dc:f8:84:eb:7f:85:22:a0:3f:33:d2:3e:64:5c:
ba:b8:4c:2a:49:da:f9:8c:8c:42:35:06:25:9f:c1:
67:30:4b:c4:62:0a:63:bd:7a:a2:d6:f8:48:48:b9:
06:f2:f0:27:97:42:f9:41:fb:eb:b4:3e:0a:3e:ae:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:82:81:C9:7F:53:35:1F:E2:10:DE:FE:74:A5:CB:4B:44:FB:EA
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:54:f2:21:e7:e3:ce:a0:80:7f:cf:d0:6e:cc:38:54:3f:
fa:7b:e7:fb:03:37:33:14:b8:a5:4e:96:7c:c2:02:b1:ad:32:
f3:44:34:53:36:05:f0:71:a5:2b:62:cf:43:c9:46:91:c7:70:
77:19:74:29:61:da:ad:31:74:b0:31:59:f4:8a:9a:a3:e4:89:
e1:06:58:df:8a:a0:50:86:87:39:a4:df:e9:ea:21:ba:17:af:
41:1f:d5:8c:45:92:6f:8b:35:96:b4:62:68:64:2d:07:df:5b:
a3:34:57:1e:85:54:91:37:3a:aa:f1:1f:4f:0a:01:00:22:d6:
52:e2:56:c8:f9:d3:c3:60:07:7d:8d:f8:ab:0a:ca:0d:3b:e7:
68:d7:8f:7e:a7:0c:2b:d4:e3:c9:b3:ca:e1:65:c6:04:f4:3a:
1c:f9:86:36:5d:6c:32:a4:4d:2b:91:97:a1:37:c5:b7:45:f9:
dc:ea:f4:3b:12:72:a4:10:b4:68:3f:d4:87:16:24:25:cb:36:
e6:8e:ea:be:57:67:95:c9:38:b2:40:a8:14:4a:21:25:d6:f8:
ce:3f:c4:9e:07:23:1d:fc:25:3c:e2:62:79:33:9f:27:f5:1f:
aa:2b:72:3c:72:03:63:02:61:9e:82:7a:bd:3c:6d:6f:5e:9c:
f4:e2:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:54 2025 by rpki-client