Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: yn80N1j96ZV/0mbL/LH9XQlspiyjW61EYIHKabC9odE=
Subject key identifier: 1B:45:17:D4:D7:EC:09:F1:56:A6:10:AE:6C:43:90:C3:A8:3D:3F:23
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 0198D5F13EF3EF0CE8B6F295E98FAC6DE052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 0432
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: YR7xbkKeR69olvA/vhXSCcZp0Q5aMNhvouyA9M/rtCM=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3e:f3:ef:0c:e8:b6:f2:95:e9:8f:ac:6d:e0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=1b4517d4d7ec09f156a610ae6c4390c3a83d3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:69:39:f1:c7:a9:e3:6c:4c:d9:0c:5f:e9:
62:04:6c:17:4b:d4:2d:c7:aa:87:a2:6b:32:50:84:
1e:d1:4c:6f:49:0b:d3:54:57:22:b0:20:dd:95:7b:
9a:63:b5:5f:60:53:c0:fd:ea:9b:0e:97:e4:2a:07:
41:f0:c0:35:34:af:30:ba:dd:cc:7e:56:69:7f:d2:
5e:c6:f2:50:69:75:ef:15:82:54:62:68:76:e2:e5:
e6:0a:9a:c6:60:54:45:bc:c0:37:68:8f:e4:45:fc:
73:ca:7a:1e:16:0f:dc:36:bf:56:36:e2:43:48:67:
0b:d5:e3:d3:77:57:36:67:ee:03:29:6c:72:9c:49:
9a:c9:ef:19:88:66:44:8f:5b:82:ea:01:fd:e9:fc:
46:82:1d:2b:10:90:5d:69:41:5e:98:e4:d0:bb:d7:
0a:da:f8:b4:ce:04:c3:3a:f1:d6:ec:29:73:6e:75:
34:55:ca:a0:6d:53:60:a9:05:d4:a0:5f:46:87:c7:
3b:22:a4:be:ef:ca:b2:7b:c3:87:35:10:1c:a0:57:
7a:20:e1:87:f1:c8:fb:73:6e:8c:c4:cb:fd:12:1e:
52:eb:30:e2:22:00:e4:51:61:3a:d1:99:ae:03:a0:
8e:80:55:5d:53:33:98:fa:90:4a:14:52:65:6d:18:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:17:D4:D7:EC:09:F1:56:A6:10:AE:6C:43:90:C3:A8:3D:3F:23
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:f3:39:66:f7:2a:a0:f1:b7:4e:f3:b3:d0:4d:97:b4:b8:
ba:78:03:a3:3e:a1:98:f7:e4:ac:03:cc:b9:58:fb:63:44:1d:
8e:33:d4:b9:81:8f:86:5f:09:15:33:76:9d:23:fc:36:09:5d:
df:c9:c8:84:b5:c9:53:f7:3b:6e:6d:7a:42:ed:b7:95:f9:b4:
06:9b:37:3a:c5:ff:94:4f:1b:92:92:76:59:f2:8d:cb:36:57:
6f:b2:00:5c:13:2e:ed:7c:55:f4:11:0c:cd:76:77:6a:ca:46:
f4:50:a9:ca:74:4c:a1:c0:a1:ba:5a:53:64:d1:f0:92:bd:d6:
42:ce:d2:b6:30:57:ce:3a:3d:7c:30:60:bb:d7:7a:e0:09:5d:
e7:46:14:8d:49:fd:0f:bd:84:ed:4c:f3:9b:ee:fa:e2:53:d6:
e0:fe:da:e7:22:75:b5:b3:95:14:bd:b5:eb:4b:a1:d2:51:26:
97:fe:94:8a:db:79:de:0b:f9:9c:ca:af:30:92:92:3a:9e:e8:
5b:58:95:2c:6b:49:31:10:13:bd:04:24:80:e1:23:77:0f:f2:
95:f9:ec:ba:29:f7:17:a0:13:db:6a:f5:4b:5c:b2:7f:39:4c:
1b:bb:f8:fe:04:8a:1a:95:31:1f:97:49:f2:a1:44:0b:f9:43:
a7:73:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:35 2025 by rpki-client