Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: 512VdE4/JHCjChdkwoT/9EQiutLJXpHdKpU+e2/Rsfw=
Subject key identifier: F5:39:35:FA:AE:3E:32:61:AB:97:92:21:F4:0E:A9:91:9A:CD:7C:E9
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0198D69854BE17BCCBAD6CE71D5CFB5AB983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 1382
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: 3Q5g9hsWROLn25a8allD+3uVmJU9fvHc0wfZc/HDlDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:54:be:17:bc:cb:ad:6c:e7:1d:5c:fb:5a:b9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=f53935faae3e3261ab979221f40ea9919acd7ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:0f:ae:30:bf:b8:bc:71:9d:eb:46:3c:25:
a0:fd:e3:9d:c6:27:83:4e:0d:4f:36:37:68:ac:73:
91:23:10:f8:e2:89:f7:7c:b7:f0:04:1f:28:a2:27:
b4:68:45:9e:10:d0:0e:91:42:d7:b8:41:74:b0:d5:
24:f3:cc:4c:65:7d:23:22:98:02:e8:1e:5b:1f:2c:
f4:9d:e1:60:dc:3d:3c:2c:fa:b5:6d:2c:b7:b2:60:
d9:94:fc:de:17:dc:32:e4:1c:12:f1:73:0d:0b:c8:
b8:dc:62:c2:24:ca:b5:83:44:43:70:e6:a7:f6:35:
17:f7:4b:fd:a0:96:e8:75:4e:5b:81:16:cd:9d:65:
74:c2:ec:5e:b8:e2:8d:e4:81:b2:30:78:59:7c:b3:
7a:7b:9e:c5:e1:f8:60:1d:e1:90:6b:08:76:cd:5f:
dd:4b:0c:cc:58:e6:41:38:20:4c:10:8f:3f:1b:d2:
cf:60:8e:dc:44:e4:c2:25:1f:4d:76:a5:ce:99:a7:
d9:06:07:64:e2:32:dc:0a:6a:f2:d1:92:9f:1e:16:
c5:9f:97:72:02:30:8e:61:47:02:b3:0a:9e:22:7b:
dd:93:d3:16:1b:05:25:a5:00:f5:0d:a2:60:21:72:
68:0d:51:15:6b:17:d9:8b:38:7d:31:ac:f9:ba:13:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:35:FA:AE:3E:32:61:AB:97:92:21:F4:0E:A9:91:9A:CD:7C:E9
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:19:44:ae:4c:52:24:2f:a3:91:d4:dd:9a:33:cb:cb:70:
68:4d:df:ef:cd:a1:76:59:64:0d:a5:ec:4a:89:79:55:7e:b5:
f9:f0:8b:81:4b:dd:ae:64:45:69:c5:0b:cc:19:9d:c4:3d:44:
ee:75:d7:6e:36:37:22:5c:f1:c2:84:ce:18:0a:45:63:80:e4:
4e:75:1c:3e:a3:13:eb:25:5b:2c:56:4b:5b:af:f2:4b:3e:28:
ca:82:6f:3e:11:6e:70:4e:e5:c7:e8:c8:41:5a:2e:34:e7:a4:
ea:10:5e:89:51:07:c5:8d:bc:cd:d1:b4:97:4e:f4:ef:60:23:
e1:5b:15:5c:c5:9b:3e:08:bd:dd:ce:a1:cd:88:b7:d7:ad:36:
65:19:c8:8d:30:be:16:a3:aa:53:f6:e5:23:13:64:24:ec:ac:
ce:9d:b9:ca:7a:50:8e:c1:3e:67:8f:b5:a1:6e:43:94:77:c0:
d1:cd:92:64:4f:8d:73:72:b1:eb:2c:a5:6d:ba:f0:81:e3:be:
d6:a5:b4:3c:43:f4:7f:6c:6d:51:4a:99:b7:ec:7c:10:9f:73:
a6:81:fe:ae:cc:83:52:f7:f5:39:4f:3c:f6:79:6e:9c:b1:a6:
5c:96:45:4f:03:98:d5:e4:9b:2d:d8:20:b8:d9:4a:b9:be:e5:
5e:b0:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:07 2025 by rpki-client