Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json)
Hash identifier: QDYZdltyTdP5gy77Gqbyka6xpRmNxp2FXubzqX44bRU=
Subject key identifier: 1F:DC:3A:12:57:BD:9B:32:2B:8C:32:6C:F9:87:E5:BF:76:39:A5:97
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 0198D6CD247D4E8022BB2E1490A63DF74FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
Manifest number: 161A
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: oiT1zON8q48/n2jnk+U9GUtnlNkCvJT17q6Xha5Xtrk=)
2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:24:7d:4e:80:22:bb:2e:14:90:a6:3d:f7:4f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=1fdc3a1257bd9b322b8c326cf987e5bf7639a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:49:09:92:47:58:02:fd:90:a5:f6:62:13:
89:a4:07:1f:18:95:bd:48:4a:be:f4:09:20:c4:3a:
1e:03:fd:51:57:2e:b6:24:71:ab:a5:54:7b:03:5f:
6d:88:2b:d3:fc:45:9c:9d:f5:77:2d:a7:2b:75:71:
e0:53:13:9a:e0:b0:c4:9c:78:ce:79:02:48:19:85:
ae:1a:16:7b:d3:4a:93:10:62:55:2f:47:e2:3e:98:
73:f8:cf:eb:d2:9a:cb:da:78:42:56:b7:4c:11:ac:
9d:c5:5c:de:6f:a7:d0:54:27:24:8d:c6:d7:1b:f1:
29:0c:50:f1:40:24:7c:93:ff:12:a3:dc:c5:7c:ae:
9b:70:ca:64:80:9e:fc:0c:2e:7a:6d:3f:08:33:c7:
d4:c4:0b:5a:af:f5:36:39:0a:c0:24:6b:ab:62:d6:
37:55:09:c2:47:d4:b0:5a:77:1e:ee:20:f8:3e:09:
50:e3:30:80:e8:d3:b8:97:19:dd:54:c2:60:8f:fe:
8e:f4:0b:81:e4:65:48:f4:86:00:5f:18:17:a3:6a:
5e:1f:eb:ba:74:4e:05:62:88:47:af:c6:b2:43:87:
fb:1b:d1:56:22:71:bc:6d:01:bc:99:05:d7:67:0a:
14:f7:da:e5:8a:a8:76:17:ca:4c:17:a0:a9:aa:b3:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:3A:12:57:BD:9B:32:2B:8C:32:6C:F9:87:E5:BF:76:39:A5:97
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:05:6f:bb:db:bc:1c:c7:0d:10:07:3a:32:4f:4e:4f:76:
8a:86:f5:60:23:8c:5c:0d:72:f2:68:31:c0:fe:72:b9:5a:09:
df:de:15:6b:6a:16:ac:50:22:25:d8:c8:73:65:18:a5:ad:57:
37:a7:24:ce:cf:c1:57:34:3c:08:38:7d:52:65:fd:c6:1e:5b:
4a:4e:c9:10:36:57:9f:12:87:71:44:28:01:a2:5f:db:2c:1a:
2f:a7:e8:1c:a6:ed:ed:92:bd:0d:d2:ca:db:4e:cf:13:ae:1e:
5b:a3:a1:b3:50:aa:47:27:8c:0a:a9:98:97:83:80:d5:4a:da:
59:01:ae:e5:4f:2c:75:d6:58:db:61:b1:d5:52:fa:63:b9:a3:
cf:62:9f:00:c2:2e:0a:71:9b:3e:60:43:e1:cd:f3:49:5d:74:
48:cb:e6:ce:dd:cf:46:c5:f8:c1:d0:fb:c7:92:1f:3f:75:3f:
71:9b:a6:38:1a:b2:c7:ae:a0:01:f7:62:2a:4c:75:41:4f:7b:
e1:08:4d:e5:9e:ed:b4:fe:1f:8d:06:db:0b:a2:cd:b2:23:51:
48:7c:15:22:fe:8f:ed:b7:06:18:72:5b:a5:69:e5:8b:43:45:
ce:00:6e:fd:68:71:79:61:2b:f9:68:43:bd:48:8d:d3:4f:73:
1a:b2:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:03 2025 by rpki-client