Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: zWZQn+YyiFaqqaYkGIY6SHXIDfxc4qOK3m8xIIEdm3Y=
Subject key identifier: 1B:64:5C:9F:D5:AF:D5:49:DB:09:23:C3:1D:6F:E9:05:27:52:65:19
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 0198D4DFCE2DA2358AC270D8ECD383E4F63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 1498
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: ctACGsvg5g8UIauA0WaDhxSGDsHynfuQ0DUFmHaVP4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ce:2d:a2:35:8a:c2:70:d8:ec:d3:83:e4:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=1b645c9fd5afd549db0923c31d6fe90527526519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:82:55:59:17:6d:82:49:22:37:ef:9e:15:
9f:7b:9e:db:96:22:69:db:58:88:b6:68:60:52:ee:
c4:e8:36:6e:51:0b:58:74:b0:bb:b6:e8:c9:25:2b:
c5:ab:6a:3a:45:a5:9c:c3:1a:95:da:3f:dc:ca:19:
dd:3a:05:f6:2f:64:ff:c8:e9:7b:7e:28:0a:cc:31:
65:ea:90:97:7c:6d:db:6b:92:ad:57:a0:86:a2:4e:
2e:54:9e:d6:48:ee:21:02:39:ad:9b:23:bc:aa:14:
39:72:22:04:26:e8:be:28:67:8d:a0:51:b9:cd:8f:
bc:e1:f5:0c:63:48:d7:cc:0e:11:7f:0f:03:7d:61:
cc:68:4b:b7:ab:ec:90:2a:dd:c7:ab:ef:8f:6b:a4:
2d:8f:49:18:1b:73:ef:66:95:af:97:50:bd:77:58:
4b:a8:17:24:35:ef:ea:9e:c5:89:ff:80:37:3b:23:
8b:d4:23:fa:0d:57:44:95:40:ef:fc:69:a9:ae:08:
71:4c:32:17:69:1f:79:73:f0:0a:45:fb:4e:bb:52:
00:9b:bc:a7:36:65:9e:3b:24:b3:2a:8f:98:b8:54:
10:81:f6:b5:3d:61:bd:09:77:3b:92:39:62:c3:20:
93:32:62:89:3c:51:06:b8:26:33:e2:92:26:e5:5f:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:64:5C:9F:D5:AF:D5:49:DB:09:23:C3:1D:6F:E9:05:27:52:65:19
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:8e:eb:e3:53:1b:a5:12:db:d4:87:40:ec:1b:32:cf:cf:
0f:4e:2f:17:39:60:e6:d3:23:a7:25:e5:ce:d4:de:77:da:ac:
8e:44:a9:84:80:8b:03:b0:d0:7a:cf:39:44:b2:dc:e5:a0:7b:
d3:53:83:3f:4d:99:fd:34:8f:7c:49:ac:67:70:4b:a1:34:3b:
5c:a5:79:7c:d6:ba:c9:0a:71:a2:21:ed:56:4e:03:5b:81:18:
dd:95:0f:ed:05:96:9e:98:44:ec:c0:ee:98:16:62:ae:79:c6:
ab:37:9b:d8:d6:72:59:74:21:44:f4:f2:47:e0:50:da:e1:f8:
82:d4:f1:d5:02:3e:92:d3:93:0a:96:22:87:b9:ba:68:24:71:
83:d6:e7:29:7d:05:80:a6:f0:6b:d5:98:54:7f:c8:50:b4:d2:
d2:0f:cf:67:b7:5d:65:4f:7a:df:a6:0d:e4:04:ed:44:4b:6d:
2e:5f:90:df:09:d1:f6:b8:d4:23:29:65:a8:80:30:8d:d7:ed:
02:d5:48:ed:c8:4c:61:11:97:c2:17:35:92:9c:0a:6c:9c:b3:
dc:e1:f1:5b:61:3e:d0:b1:fe:ba:d2:a1:63:94:9e:e0:3f:3b:
3f:8a:d0:3a:19:ca:fc:27:a8:8b:37:fb:0e:76:a1:b9:8e:36:
99:59:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:42 2025 by rpki-client