Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: UDkS8XuJBavG2P91JSsGfgF+VzumCr6388xVMqvZjMQ=
Subject key identifier: C5:5B:FD:87:C9:C5:D0:49:FC:3C:EC:F2:26:C6:55:47:D8:E2:B9:F2
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 0198D47310DFD330E9DCE53C2B5947D1F818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: RaociqxF+Ph0d1JXwPklXQBawJJRBbzLU5TV3Spa+Eg=)
2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:10:df:d3:30:e9:dc:e5:3c:2b:59:47:d1:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=c55bfd87c9c5d049fc3cecf226c65547d8e2b9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:e3:37:bd:b2:db:15:3b:04:5d:54:0f:ee:
95:cc:5c:2f:22:b1:25:9e:13:bc:f0:bd:19:92:d2:
6d:0f:43:a0:97:7b:0b:21:e7:95:20:22:66:0c:e3:
95:a6:a7:4f:66:38:e3:33:56:d1:46:f7:e4:cd:76:
7c:0c:7d:22:7e:c3:0a:09:e3:15:ed:e2:a0:8e:fa:
14:49:4d:3d:db:cd:33:0d:6c:37:db:54:0f:3a:ee:
07:88:b0:99:0f:a4:de:e0:fc:88:f7:39:0b:b8:75:
c8:13:05:d5:c8:a5:78:11:50:64:fe:43:8c:38:4a:
53:75:e5:51:2d:f4:57:77:16:c4:aa:43:e0:a1:fc:
25:45:fd:64:81:90:d0:db:a6:07:67:58:71:eb:00:
fe:7c:72:80:4e:ba:38:16:14:ab:d8:39:1f:28:3d:
eb:56:be:f6:39:41:19:80:e3:ba:c1:22:50:f0:fc:
79:d6:c5:26:57:29:85:39:d2:d7:aa:ef:14:f8:a8:
c0:fe:ad:ff:a2:e0:51:d0:61:4d:c5:37:38:52:ce:
d8:cd:7c:0a:d6:21:6d:34:6f:74:21:6d:3b:fa:bf:
45:ba:b3:40:60:ac:4f:e5:b8:4d:77:94:70:ab:48:
b0:5d:dd:6d:6a:9a:39:23:38:01:7a:67:2c:cb:72:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:FD:87:C9:C5:D0:49:FC:3C:EC:F2:26:C6:55:47:D8:E2:B9:F2
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:d6:a3:49:6e:cc:c0:4a:c0:01:27:b6:cf:33:9c:38:10:
76:ca:89:47:60:cb:9d:d6:02:7d:bb:99:9c:8a:a7:f4:97:07:
0b:11:95:ab:27:36:c0:e0:bc:56:e2:6d:5e:49:8b:14:14:4e:
be:f0:23:5e:4f:db:31:1f:fd:80:60:ef:88:84:fa:6f:3f:7c:
f4:7e:0d:1b:d1:68:d4:a7:9b:21:86:9a:64:03:f0:e1:6d:68:
25:43:cb:d5:63:db:3f:33:ed:d0:7a:5a:db:20:f4:da:5a:67:
25:c2:35:94:fe:76:6a:97:f2:70:03:57:e6:29:11:63:6a:7f:
de:8d:d9:5a:26:81:0e:7f:77:14:24:de:d0:a8:b1:d5:f6:a1:
db:f9:f4:10:c8:46:58:2f:d2:7c:40:c9:bd:f3:88:b0:ce:7d:
04:a4:ae:e4:75:89:fd:07:b2:b7:e8:e0:ea:76:73:79:ee:f8:
e5:42:6f:4c:32:b3:92:74:61:06:16:64:51:29:b5:6f:35:5e:
05:cf:28:3e:2d:f5:6b:f9:29:65:d4:6f:bd:af:e3:30:12:76:
8a:b7:08:b7:ee:95:18:d2:d7:1f:c2:7f:b4:09:75:b4:f0:d2:
d1:47:6e:4f:54:f2:d6:85:e0:92:4b:20:3f:9e:7e:c6:95:1d:
ba:8f:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:42 2025 by rpki-client