Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: P3O5JrASoivfHuL3xs5pqTeEu8TRxG6gTjqySt2al+s=
Subject key identifier: AD:0C:92:E4:F1:D3:BE:31:29:E6:E6:43:FF:5E:7D:BD:CF:3A:33:75
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 0198D6612647B5CD80E8B89B8963F2A4EAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: u3dWglm1bMiX75S0wnZQzeNSevN6/9vwqtSMgLlzjaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:26:47:b5:cd:80:e8:b8:9b:89:63:f2:a4:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=ad0c92e4f1d3be3129e6e643ff5e7dbdcf3a3375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:8b:85:b0:9b:fa:82:f4:c5:bf:19:58:87:
5a:74:ff:99:cb:75:95:ab:2f:13:4b:5d:08:25:77:
c1:29:e3:da:15:10:e3:5e:b6:ea:e6:a7:2e:d1:28:
4c:71:fa:5c:1e:ad:8b:9f:7c:ec:b0:c1:1e:3a:c2:
45:40:3c:b4:38:47:b7:21:55:43:be:f6:2b:a1:ec:
a2:f2:fa:68:33:25:ed:76:20:13:37:ca:0f:fc:81:
62:21:98:d7:cb:07:d0:a9:9c:1a:36:17:62:fb:44:
2f:4b:35:c9:ba:cd:13:66:70:ca:ed:ab:c0:71:72:
66:96:3b:af:84:9e:55:53:58:29:7a:c7:0d:80:79:
e4:6a:97:81:c1:b9:a4:04:97:52:27:be:f7:72:44:
9b:d4:15:ef:18:40:e2:72:75:b6:ed:0f:28:1f:89:
aa:aa:8b:80:0d:e0:f1:96:b2:10:24:e0:a2:91:4b:
b5:13:db:af:de:63:bc:b7:f2:bf:ff:6f:85:ef:df:
46:94:21:d4:cd:90:f9:ff:9e:d7:dc:49:63:77:5d:
c9:11:b5:0a:dc:c7:e3:10:93:94:03:d6:8e:7e:63:
b0:06:fc:1c:2f:b4:a8:ca:10:33:bf:b7:7c:93:c6:
92:ae:38:ee:1c:18:2a:2e:d2:64:a8:cf:7d:e1:e0:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:92:E4:F1:D3:BE:31:29:E6:E6:43:FF:5E:7D:BD:CF:3A:33:75
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:b7:51:0b:13:4c:33:2f:1d:27:de:b7:48:94:0b:20:95:
70:dc:25:a0:2b:e3:45:2e:ee:99:d7:80:67:61:dd:3c:b2:27:
2e:a6:5d:2c:99:da:5e:26:46:33:31:c6:e4:cf:c5:74:9c:fa:
4e:34:9a:e6:33:55:fa:cb:89:f0:7a:cb:6c:d5:65:9b:2f:59:
ce:e3:8a:fe:f7:13:c4:c0:77:7e:24:d5:e6:43:63:33:f9:bf:
5f:6e:40:2c:b1:86:81:44:55:82:68:22:08:d4:de:42:b1:ac:
5d:c5:14:6c:fa:27:09:dd:8f:db:f5:52:45:f9:f2:f1:3c:87:
21:ab:d2:29:3e:1b:8f:21:73:63:eb:9e:b9:9e:a3:1f:ca:35:
93:49:93:9c:ac:c1:b0:c1:8e:4b:c2:df:dc:c0:67:6d:b3:f6:
13:b2:82:57:e6:f0:16:08:f0:4a:35:58:a9:fd:b3:13:62:fa:
42:fa:81:2c:60:73:af:62:63:e0:ec:3e:2a:09:38:0b:af:74:
54:e9:0d:12:9e:71:9d:39:6d:f3:6b:b8:d2:f7:3b:bb:ee:60:
d6:e4:9a:cc:b2:a7:f1:e3:7f:86:f5:36:32:61:e5:5f:cb:eb:
f4:2b:ca:74:3a:cc:2e:69:5a:e1:cf:78:70:49:5a:f6:44:89:
37:af:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:43 2025 by rpki-client