Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: 0HcFBqbUgRKiH2zFNQJjJohajWxhqPI1mJG3kRpu0ns=
Subject key identifier: 85:E4:BD:58:DE:8E:60:70:49:EE:BF:98:58:49:D7:E0:8E:F9:25:2F
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 0198D65F60E4D0A65D01B5090D617BDD9606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 042E
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: dcpIV3fMPBaQP+KEW2Tl7JLu0Tibn7vVvjLFuNgTeAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:60:e4:d0:a6:5d:01:b5:09:0d:61:7b:dd:96:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=85e4bd58de8e607049eebf985849d7e08ef9252f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:11:6c:e8:55:6c:b2:6b:dd:cb:4c:10:ae:
de:84:d2:c1:6a:72:00:3d:50:1f:64:98:78:92:ca:
b9:7f:6c:7f:d1:f4:ab:ed:7a:c6:a0:16:3e:83:cb:
84:ec:7b:40:57:5f:65:86:37:8c:1c:b4:be:d1:1e:
ca:d4:b8:a4:77:28:84:15:94:02:2d:00:0e:ae:67:
9c:6a:af:fc:3e:3b:89:bb:ac:e6:4e:1b:58:94:06:
c0:0b:c4:b4:ca:d9:b2:10:30:78:14:e0:be:6d:f4:
b3:19:09:a9:c5:45:22:8e:b3:39:92:de:7e:02:4c:
8a:83:d5:46:df:db:43:31:ad:f1:bb:0e:b7:12:60:
3b:08:80:6e:72:9f:16:37:5d:dc:17:2f:a6:de:44:
73:cd:d1:1e:68:78:55:56:f0:c4:d2:cf:b4:5a:d7:
43:4e:17:7b:59:db:7c:af:2f:11:ed:94:95:2a:14:
fb:ee:db:09:01:12:6e:aa:a8:d2:56:b7:35:15:16:
66:fb:65:b3:e2:6d:08:38:4a:82:6a:0f:07:c1:29:
69:3f:aa:0b:6b:00:a0:1c:da:d2:0f:63:7f:42:2d:
91:63:0f:6a:2b:ee:2b:8a:06:75:df:14:c6:c1:25:
a1:4d:23:8f:6e:ee:43:52:d0:eb:d7:d3:4f:6a:41:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:BD:58:DE:8E:60:70:49:EE:BF:98:58:49:D7:E0:8E:F9:25:2F
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:ea:6b:c0:f9:4b:33:89:54:27:e1:18:c9:02:4d:02:6a:
b8:b3:d3:22:34:bd:18:b9:35:7b:8f:46:f0:d6:60:cc:4d:66:
70:21:b8:fb:dd:8f:ba:ac:1c:bf:b2:96:87:9c:91:6f:48:38:
e7:a2:09:af:bd:72:1e:7d:d7:ee:11:8e:4c:32:26:5d:02:68:
b8:c7:aa:b9:d5:85:f5:a5:4f:0b:4b:f7:4b:68:2b:49:69:67:
fb:83:2f:89:80:43:38:c2:80:dc:13:0b:db:12:77:cc:33:06:
9d:e3:86:50:e8:97:47:a4:f3:95:39:61:27:d7:8e:a8:8c:14:
44:63:bc:04:e8:83:51:a1:5f:e2:08:d4:3b:fd:75:2a:ec:44:
f2:99:b7:ca:55:ff:64:fa:c5:a2:bc:63:e4:b4:5a:53:04:94:
b7:86:64:f0:27:58:19:dd:81:b2:c6:70:f3:7a:7f:ac:be:27:
0f:e7:f0:36:a6:2d:5e:0e:88:d5:38:7c:ac:04:f0:10:2c:9a:
4e:9a:d9:42:a9:c0:6d:ea:12:3b:f4:ac:27:e2:ad:2e:69:c5:
11:1a:45:3e:27:5b:48:c3:45:ba:c9:4d:d6:c8:1f:02:fc:6f:
36:92:f5:07:e3:c7:49:ac:d3:e7:a5:38:5f:ca:fa:a0:b8:30:
c1:f5:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:28 2025 by rpki-client