Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: 0MY52YIMrL9mVH1TLNf6ztHdAaXN5DiCqE0DReoM4b0=
Subject key identifier: 4D:A3:6A:91:EA:33:C1:38:73:33:73:E6:35:E7:BC:35:94:FF:4B:B3
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 0198D4A7DC2C75F0333BF4099B048421983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: DAzbJIy2BiYgr3l7jPmSM3HoMYCaBX6IpXDxy+CooHk=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:dc:2c:75:f0:33:3b:f4:09:9b:04:84:21:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=4da36a91ea33c138733373e635e7bc3594ff4bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:43:7e:a7:ca:76:bc:65:2c:74:73:73:98:
8c:59:09:97:0d:3e:b5:5f:48:d4:03:00:88:23:34:
fc:7d:9a:60:51:04:2f:51:f9:2f:6c:4f:f6:4b:59:
29:bb:86:ca:e6:19:92:4d:f3:b4:4d:eb:9d:bd:65:
42:76:ed:12:2b:a7:6e:ce:36:18:1e:fe:9f:53:51:
44:4d:cb:93:69:c4:85:14:51:40:69:96:0e:e0:3f:
f4:9d:d0:68:58:5d:4a:c1:2b:7d:5e:7c:14:73:66:
24:59:ea:52:2c:f7:96:47:87:28:1e:39:a6:4e:d0:
2f:d3:f4:f6:a8:5c:e6:7f:18:a3:30:a6:36:b0:2a:
6b:73:03:ad:db:17:3d:95:b2:c6:60:c1:e2:24:3e:
c3:de:d6:15:6c:f5:87:c6:61:dc:a6:ca:a1:45:18:
cf:af:48:3c:75:44:be:b5:d6:c8:ff:8c:74:f0:d1:
ef:87:c4:26:85:96:6c:27:55:af:9f:be:0c:05:a1:
dc:b8:c6:29:37:32:3a:f7:77:2e:0e:97:cf:14:79:
f5:22:08:96:b5:10:ed:b8:f8:dd:ee:87:ae:e4:5a:
42:cf:fa:98:0a:93:24:4c:10:f9:62:73:e3:e1:01:
97:38:32:3d:54:04:19:07:f5:c3:ef:8a:c4:81:70:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:6A:91:EA:33:C1:38:73:33:73:E6:35:E7:BC:35:94:FF:4B:B3
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:cc:41:0f:13:04:3e:ab:18:bc:a9:81:2b:15:ac:68:82:
82:9c:05:32:b1:8b:f5:c0:bc:c2:b7:5f:0e:ee:43:d4:2c:8e:
16:cc:19:a1:da:56:3f:c5:69:2d:44:2b:8b:a1:e2:6e:b6:00:
4e:b2:2f:03:c9:9a:aa:77:82:42:52:30:49:bb:cf:d2:db:4e:
16:87:9e:9d:36:1c:94:f2:5d:9e:2f:b2:ac:00:5d:cb:34:19:
0a:ae:ad:a6:2f:2a:d9:fe:a4:12:36:99:28:cb:bc:df:e7:34:
67:24:58:23:76:dc:99:8d:b2:06:04:a7:2c:ec:cc:93:65:d2:
39:7b:b3:66:73:e4:bb:5f:98:ab:d6:dc:15:8f:2d:6b:65:f0:
f3:af:08:f8:5f:12:b6:63:26:58:c8:ae:6d:8a:f2:a0:81:6e:
24:86:53:b9:e9:06:49:d3:5c:56:6f:16:0d:3e:87:18:52:a3:
15:91:1d:0c:85:64:ec:8a:56:12:35:a0:ab:c4:1c:da:0f:ff:
03:a8:9d:ae:2b:9a:96:64:72:a3:db:17:1d:bb:6a:01:70:cf:
2e:af:e9:62:7f:d6:b0:cf:87:d8:e8:d6:7d:ab:ee:da:bc:83:
d2:b1:84:e5:61:5c:cc:3f:13:2e:53:bb:2e:c1:67:12:96:8e:
01:af:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:24 2025 by rpki-client