Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File: 5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier: ocrG6DRqQeI6BFr/gma1Eg8JVUtA96BHm8rasMIqfxI=
Subject key identifier: A1:93:0A:E5:6E:3E:7E:04:D8:80:D8:A5:EC:27:77:83:EE:FD:B8:38
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer: /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial: 0198D69841BF1C69DEFC055F45470504F8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number: 11A6
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: WVGvL471qhw8nAbDD0nxQhxGDHciBPXBwv2F7F0it84=)
2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:41:bf:1c:69:de:fc:05:5f:45:47:05:04:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=a1930ae56e3e7e04d880d8a5ec277783eefdb838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:6f:ec:4a:53:2d:2a:ee:91:c4:74:61:bf:
89:8c:77:19:2d:f8:a7:2b:2a:5f:f1:2a:3c:a5:ed:
67:3c:cf:33:06:47:51:ee:58:44:6a:d4:2d:f1:d0:
48:c1:40:a8:d1:56:80:ce:b4:8e:e7:32:b3:46:7e:
68:56:b7:40:75:bd:06:4e:15:7c:95:52:d6:c3:6b:
15:d7:5a:1a:82:d0:da:08:09:ee:db:3a:0b:c5:5e:
ee:b4:e6:5d:40:f6:15:f5:0e:c8:09:48:21:3d:03:
4d:7b:25:96:82:5f:f0:e9:58:70:ec:a6:a3:28:5b:
db:3a:60:92:d4:d9:08:d1:2a:0f:bf:25:c6:be:47:
41:9c:f7:78:4b:ac:21:40:5a:d5:25:34:f6:13:55:
93:ea:0e:5e:95:90:cc:dc:81:a9:70:73:10:61:40:
ce:15:c7:77:fc:8f:d1:96:6c:28:e8:91:3f:39:1c:
00:1b:8e:ee:53:fc:f3:d0:42:dd:81:38:7b:a5:7f:
b2:91:ca:bc:89:7b:07:25:fa:c1:8d:be:9c:d7:9b:
28:38:1f:90:32:cd:6b:0b:2d:ee:e0:9b:fd:b3:22:
7f:ea:79:4a:46:e5:98:6f:33:57:d9:a0:01:44:7e:
82:d2:eb:6c:1b:40:76:39:20:17:d2:53:ed:16:d5:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:0A:E5:6E:3E:7E:04:D8:80:D8:A5:EC:27:77:83:EE:FD:B8:38
X509v3 Authority Key Identifier:
keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:a9:9f:d8:76:65:79:67:11:6b:de:6d:ef:f0:c3:07:97:
97:62:09:b1:46:69:8d:90:81:dc:0e:2e:94:35:e3:e8:8e:e5:
2b:ba:72:d0:97:eb:19:ee:b6:4d:f8:a6:0f:21:c7:c7:0e:41:
ec:65:c0:84:f3:9a:1b:fd:1e:21:d8:de:f6:d0:41:18:40:6b:
e0:82:ed:e3:65:f3:41:81:c7:8b:20:f0:0f:bb:fc:52:56:44:
1a:02:64:e5:21:37:a9:16:e7:91:22:ec:98:27:93:72:6f:af:
4c:c0:89:f5:e4:dc:de:ff:96:65:ab:8b:66:0b:6c:6c:cd:cb:
fc:c8:de:e6:5a:ae:46:b9:38:5c:0f:46:bc:da:cb:05:ef:f8:
a1:47:51:c7:19:91:14:61:10:78:6c:87:69:3a:f0:35:45:ab:
f4:01:19:d2:c5:02:8b:58:f8:49:b6:b9:bc:2d:a3:e1:b0:b7:
fa:95:89:0e:50:25:00:80:bf:bb:6c:96:34:19:e1:29:a6:fb:
ad:bb:cd:44:e3:7b:0b:05:61:93:d3:96:ee:14:6b:2f:25:aa:
98:52:d1:a4:f5:81:73:95:fd:4e:90:8c:12:9d:c6:31:da:ea:
b4:51:35:f9:98:33:e9:bf:3f:89:f1:d5:57:54:fc:07:5b:2a:
74:cc:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:25 2025 by rpki-client