Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: RsT0pkisWhQiJ072XS5DgovruKJwX+R/tWSwOWzUOlw=
Subject key identifier: A9:78:94:A5:47:5D:DE:BB:2A:95:F4:F4:29:1C:B4:1B:E1:63:12:48
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0198D5835DA46144301BA7DF1E54667A8971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 8dSfIoMUb9l89dSLBq73jqsrrAUtIglX1o5vlWdrBCg=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5d:a4:61:44:30:1b:a7:df:1e:54:66:7a:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=a97894a5475ddebb2a95f4f4291cb41be1631248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:c5:f2:18:05:24:9e:5a:5b:a7:8c:5d:1b:
29:a9:f4:b1:e9:78:1e:02:6f:de:8e:71:25:40:32:
fe:b5:24:d8:ae:08:57:46:13:19:ec:57:1b:6b:15:
37:16:a7:94:fe:22:07:30:7b:ba:34:92:f7:6d:cc:
80:fd:dc:ee:60:f3:fe:d4:25:3f:ac:8f:cf:5b:57:
18:01:6d:1c:e2:e2:0f:f7:77:77:b0:4c:96:d2:bb:
f0:a6:4b:c9:cf:18:3d:df:e8:8a:f8:8b:8a:34:56:
33:d5:45:5d:df:7f:b3:9e:8a:6d:db:a9:48:e2:43:
8b:1b:97:c9:2e:39:6d:3d:37:d0:c3:48:6d:76:1f:
6f:2a:fc:da:af:0c:46:f1:ac:19:93:ca:1c:3a:f5:
19:0f:9e:0c:b0:ca:cd:0c:cf:42:97:36:e5:69:6b:
d0:ae:74:18:ab:4d:81:5e:a8:d9:51:12:22:f0:68:
70:0b:10:d7:c0:3e:87:9c:e5:e4:a5:69:ec:9e:7c:
63:b6:70:d5:5b:98:dd:39:c0:f7:35:47:ab:7b:24:
7f:96:b4:d4:ca:51:b8:96:10:b8:09:f8:8e:b7:c0:
4b:d0:59:d6:da:4c:a6:4c:67:2b:ec:a8:7e:94:bc:
e5:c3:ce:ce:11:eb:a7:a1:82:46:27:8a:0f:93:df:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:94:A5:47:5D:DE:BB:2A:95:F4:F4:29:1C:B4:1B:E1:63:12:48
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ba:e4:9d:ed:40:1d:fe:7b:df:7d:c4:58:18:d8:9a:af:25:
f9:92:3a:dc:27:fe:c4:73:ed:48:fa:49:51:8e:4e:48:cd:8b:
f2:01:64:1e:27:fd:a8:f6:4a:20:30:37:37:44:c3:b0:e5:90:
5f:e1:e5:01:48:87:86:b1:50:d1:59:33:7b:b5:a2:0d:63:6b:
c5:8a:e8:03:bc:f4:01:f2:72:84:e4:73:60:1f:d1:6c:f7:db:
df:41:35:2a:88:a6:2b:9f:dd:20:75:21:96:b2:01:f7:ad:25:
7f:65:44:82:c8:71:ce:7e:c8:d0:6f:bc:00:50:01:67:2a:fb:
c0:57:b3:5b:43:c5:89:b2:71:03:13:96:ab:b6:db:f3:50:20:
67:bd:d4:d1:0e:81:97:a6:fd:57:f9:12:dd:93:01:7a:c0:6c:
29:93:b0:69:cf:f6:67:dd:15:ad:1c:0a:79:e0:e2:ac:01:3b:
fa:09:d3:3e:a1:74:18:e2:5a:8d:e4:46:e8:89:74:e9:18:b9:
03:da:9f:3b:f4:cd:5e:e9:5d:19:ca:61:66:c4:20:20:c2:13:
99:9f:d9:f3:f7:30:e7:4f:65:7b:60:04:84:86:e3:90:f4:17:
3c:7a:17:ae:bb:20:1d:ba:ce:ec:96:f8:c8:60:64:f7:0b:07:
a2:43:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:05 2025 by rpki-client