Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: qCtaWsaD0MQbaCCNMShs6e7SHeeJGctU8eg9nr1MEmU=
Subject key identifier: 65:59:B5:07:39:CB:9F:F5:52:E6:63:F5:9B:0B:08:52:C4:40:C5:00
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 0198D5F1D27761F9E51FEFFA115CF63712DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: naAr/mUbgHeMpeOLAYmuw1fXJ0c+ui5UHMri5aF/5Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d2:77:61:f9:e5:1f:ef:fa:11:5c:f6:37:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=6559b50739cb9ff552e663f59b0b0852c440c500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:ba:40:12:16:68:74:bd:3b:72:8c:41:98:
9b:87:f2:6b:7f:af:cd:94:09:11:93:d9:99:23:73:
5c:65:0f:d8:6e:49:5c:d8:22:23:39:dc:cc:ec:d9:
85:d6:9f:64:de:a8:1f:6b:d8:69:96:3d:ba:80:d6:
93:f4:95:96:07:41:74:c6:6f:1e:a1:54:d6:72:70:
75:0e:72:20:b3:85:0e:10:9f:9e:57:1a:41:30:ba:
8f:10:12:ba:87:75:ee:7b:3e:ee:e0:5c:6a:2d:62:
34:19:28:8d:c5:50:2d:91:00:7c:c1:8c:fd:2d:ba:
0a:a2:fa:35:63:e6:e0:f5:a7:1d:eb:d2:0c:6e:da:
15:b5:c0:37:eb:89:9d:c1:94:80:6d:bc:fe:ad:62:
ea:52:30:7c:0e:89:19:46:ea:f0:95:09:f3:58:f3:
8f:d7:b3:22:05:62:c5:d1:70:13:1a:67:15:ef:e2:
23:bc:1b:c3:da:3f:b9:44:9f:91:0d:6d:88:42:ee:
93:32:cd:14:98:7c:28:91:16:a3:3c:ac:f5:b9:b4:
ef:ff:f5:28:6c:29:7d:ad:27:7c:a7:a0:7e:64:d9:
9b:53:ba:d2:a1:97:e2:11:07:5f:54:1c:3a:6b:70:
ae:4c:9c:fe:a8:54:fb:f0:cf:90:ca:86:b7:4b:28:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:B5:07:39:CB:9F:F5:52:E6:63:F5:9B:0B:08:52:C4:40:C5:00
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:87:b8:ae:c8:1c:9f:bc:8e:3a:6c:7b:f2:0d:c0:f9:e7:18:
26:37:a4:db:e9:90:0e:ed:50:40:ad:a4:be:b9:71:ff:ba:06:
46:2a:33:f9:d7:4a:57:3b:51:10:ff:47:04:57:40:d7:a6:6d:
50:15:21:14:45:64:43:f0:c8:78:47:97:5d:fe:9a:5c:14:30:
0b:2e:27:4b:50:a3:ed:e4:ff:4e:c0:ad:26:18:6a:1b:9e:f0:
8a:b6:f1:58:26:29:4d:62:97:f4:a5:7a:2d:7f:3a:b4:8b:90:
52:be:ba:16:85:6c:fc:62:73:4f:fa:98:02:55:40:1f:6a:da:
eb:bd:61:34:dc:45:eb:31:d4:bd:ea:26:ec:8d:61:4c:81:b5:
16:ee:97:34:61:9b:7c:d1:79:26:b0:e1:73:77:ea:91:63:7c:
14:62:6e:eb:5b:fa:b6:e0:c5:fe:c2:59:a7:4c:2c:5d:01:f2:
b9:7f:fe:26:9f:75:65:66:fd:b1:2a:df:cf:75:d6:73:d8:97:
da:1e:79:44:c6:d5:c4:6c:50:34:2e:c8:3d:ed:bd:6a:e3:50:
49:c4:ae:20:12:79:a7:a9:54:22:05:92:32:72:78:6a:4b:07:
28:1c:2e:97:50:d6:71:ae:20:ac:55:d9:9b:96:a4:23:7f:39:
82:76:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:50 2025 by rpki-client