Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: mkC/BCeQw9l/50qsO6e6J9CxM5hwOXVIZihIrJlazE4=
Subject key identifier: 5C:AC:5C:12:03:88:25:CB:FE:B7:E1:F0:4B:E8:55:8F:0F:A4:90:EC
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 0198D4A82F6B424256376F1344C79160D666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: lLGF35X1wXk8Qi+nCeVaPTj+SCeg773ieGgk/aLfs4Y=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2f:6b:42:42:56:37:6f:13:44:c7:91:60:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=5cac5c12038825cbfeb7e1f04be8558f0fa490ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:bd:08:3c:96:f6:cf:d4:f6:46:1a:59:54:
5d:83:ad:53:03:b1:41:62:01:09:9a:54:72:76:07:
19:e0:4c:84:d1:67:f5:ae:f4:8d:5b:8c:df:a3:d8:
d4:e6:0c:6f:e9:f6:40:02:af:9f:b7:5c:da:98:7f:
fd:8f:a9:c4:69:75:4c:5f:bc:f3:9f:83:7b:23:dc:
7b:43:1e:1f:fe:13:fc:50:3e:ac:54:78:cf:21:cc:
38:d0:09:a2:38:4a:b5:fd:bf:52:1b:3f:7b:56:4f:
aa:13:27:8f:9a:01:0c:a6:20:44:d3:da:6b:d0:c1:
d8:e0:7b:0f:c2:06:c2:e2:a3:46:c0:4d:73:14:af:
88:76:02:53:a7:f4:f2:cc:c4:cf:31:7c:3f:ab:8b:
aa:43:f3:a3:a0:6b:d5:b2:b3:02:4b:df:12:4b:a0:
05:c2:89:14:be:ee:a0:4d:98:0d:ce:e7:a3:93:b8:
6f:b9:8a:83:93:a6:f2:59:4f:7a:17:8f:78:7c:42:
53:43:e3:09:e1:e4:c1:43:35:67:cb:20:9b:ef:8b:
ab:bb:95:88:97:03:18:5f:4c:bc:76:f8:dc:1c:06:
44:c9:42:14:9c:d5:8b:aa:5f:23:f6:77:c4:d9:96:
c8:85:9d:6d:8e:e5:ed:5a:0e:08:7b:bf:b7:4b:f0:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AC:5C:12:03:88:25:CB:FE:B7:E1:F0:4B:E8:55:8F:0F:A4:90:EC
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4f:91:bb:13:34:69:02:0b:19:c8:a6:b2:2a:a4:52:87:13:
94:2e:11:48:7f:92:bb:07:8e:28:5e:ff:3b:5c:d8:81:bb:28:
2d:87:8c:00:44:c2:13:61:5e:50:04:c8:c2:d2:ff:21:59:96:
c1:3e:7b:3b:fb:f6:7b:53:0d:39:3e:4a:88:9a:d4:09:d3:24:
0c:70:77:58:b3:17:0e:7b:93:a5:af:98:68:12:38:4b:b8:13:
47:df:a7:7e:cc:b5:9e:32:58:f5:fd:d9:40:16:fb:13:58:7a:
45:c9:b8:56:61:94:b7:0e:fe:a7:a0:b5:8b:70:ba:ea:97:f5:
50:60:ec:66:96:e6:a5:7d:72:9a:7c:1d:3a:96:af:32:53:ac:
eb:d8:61:0d:d3:2f:00:3c:e6:de:f8:46:49:f3:1f:df:a5:b8:
3b:69:56:20:db:74:cd:ab:32:b0:55:ed:7a:5f:c0:bd:9d:30:
1e:08:89:a0:68:74:b9:c5:cd:37:49:3d:d5:ac:4f:74:80:d2:
2f:94:d7:70:84:b4:b4:93:07:ea:68:01:c3:8c:14:9c:0f:65:
25:5e:1d:58:48:cf:f9:94:da:e3:11:80:73:71:37:55:1a:34:
c3:e2:18:3a:03:3b:cd:40:22:69:46:49:a0:de:ec:32:8f:db:
6d:3d:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:23 2025 by rpki-client