Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: 1asAmoTqCqLgH/yYlPCLR9q+d2EKNU8Jo9Zwa9hap2Q=
Subject key identifier: B5:64:CB:DC:09:4C:D4:AE:B9:B0:1D:F0:DC:8D:7C:E5:95:C6:D0:88
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 0198D4E0117E84F936D628158A80AD44D65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 03EF
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: T6rxYrYjcgryNlHllAuKOd+m4qvLQbPdOrSydmeJKm0=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:11:7e:84:f9:36:d6:28:15:8a:80:ad:44:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=b564cbdc094cd4aeb9b01df0dc8d7ce595c6d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:16:9f:e1:9d:e6:23:9b:fb:8b:a2:38:41:
85:12:e6:41:0c:7c:04:15:a8:ac:81:71:99:07:15:
1a:0d:30:cc:e8:75:4a:76:ef:3f:8c:0c:73:51:ae:
09:7e:a5:42:db:41:41:cd:8f:ae:06:c4:cd:fa:ed:
d3:41:bb:4a:8f:9f:c7:05:66:76:fe:5f:7e:90:a7:
c1:df:07:7c:3f:0e:4c:4f:14:da:df:86:5b:68:6b:
c8:75:8d:8d:a3:a9:5f:38:c7:0c:96:7e:8b:ec:75:
89:c8:1a:17:2d:6d:1a:93:2a:76:c9:5e:b3:0c:ab:
4b:ee:7a:66:c3:2d:54:35:5a:26:f7:12:16:22:05:
8a:61:93:86:2b:6d:9f:0f:8a:00:56:bc:63:3a:54:
9b:59:65:76:fa:ad:5c:de:af:56:a4:23:f4:90:60:
68:6b:1e:0f:c8:73:36:c2:06:c2:72:97:86:09:6f:
eb:11:3e:18:83:ec:84:3e:5a:15:4c:98:db:c7:57:
ad:38:cd:ba:9d:c8:f2:eb:44:62:e2:2f:21:5b:58:
5f:95:0a:eb:fd:79:2a:99:45:4f:73:9a:0d:37:3d:
33:b2:d1:0b:9b:cc:d1:04:aa:da:cb:16:86:80:25:
16:6a:b4:82:39:b2:42:b5:87:f9:bd:2d:71:86:0d:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:CB:DC:09:4C:D4:AE:B9:B0:1D:F0:DC:8D:7C:E5:95:C6:D0:88
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:a1:2f:e6:6c:1b:d0:af:f9:28:4b:50:aa:e3:7f:4e:dc:
52:bc:d6:b7:08:ee:36:b2:4e:36:f5:5a:42:99:b2:99:01:52:
1d:b5:13:32:a9:42:4d:a8:f7:8a:c1:01:31:07:b1:f5:16:ac:
34:43:4c:b1:57:97:fd:1e:e6:95:f5:04:2d:af:e5:99:04:a6:
28:0e:52:d1:34:9f:44:cc:95:75:9b:3d:50:93:e6:80:1f:f5:
d0:8c:b4:71:ac:b0:6b:f4:34:7f:d5:1f:c4:b1:fb:04:e0:b0:
53:66:e4:17:19:3a:e3:ff:f1:14:28:77:51:ac:9c:45:19:f1:
17:cf:01:57:a0:d5:b1:bb:26:c9:d7:4d:4e:dc:4d:f0:c4:99:
fb:3e:e8:3c:e6:1b:fb:e7:69:29:f5:70:e3:79:77:ff:be:28:
91:8e:dc:79:7f:63:7c:50:77:bb:d9:12:fc:b4:ed:c3:85:ad:
45:de:45:2a:9b:96:bd:bf:dd:55:d5:14:b6:44:92:3a:d7:b3:
4b:22:b1:d3:35:b9:6d:b3:bc:d4:49:b4:99:3a:d8:8e:cc:eb:
30:86:05:4a:fa:47:18:ba:28:71:4a:ea:9f:8d:a7:5a:b5:17:
be:f3:7d:8f:5b:f4:b5:f3:1f:8e:47:38:8a:d9:06:f2:8d:0a:
44:2d:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:43 2025 by rpki-client