Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: 8dGcIQWtIN5grh7iNj7GYlWO1P2J1aCaStv0pRYz+K4=
Subject key identifier: C1:3F:7C:79:3C:01:7E:6E:5D:5A:77:40:99:16:48:BE:EA:7E:03:84
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 0198D404F984C589CE5DF92945CF628907C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 098B
Signing time: Fri 22 Aug 2025 23:02:32 +0000
Manifest this update: Fri 22 Aug 2025 23:02:32 +0000
Manifest next update: Sat 23 Aug 2025 23:02:32 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: oToP3lX3oGlONqwYLUSGgSpWnpLH20vmwGFRtkTv3IE=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:f9:84:c5:89:ce:5d:f9:29:45:cf:62:89:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Aug 22 23:02:32 2025 GMT
Not After : Aug 23 23:02:32 2025 GMT
Subject: CN=c13f7c793c017e6e5d5a7740991648beea7e0384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:5f:0b:94:5b:0b:5e:7b:3a:43:05:01:94:
cd:84:03:44:a4:88:b8:44:b2:a5:eb:cb:3e:7c:46:
2f:47:dc:2a:3f:c3:f0:0a:78:02:a0:ad:34:f4:77:
6a:01:06:ec:4c:c6:d7:0c:37:29:d2:6b:1f:ba:99:
ee:b8:cf:9b:8e:7e:f0:56:5e:5a:2a:98:b3:58:57:
74:2c:cc:0e:d0:df:04:7c:63:d5:6d:d0:b5:c2:04:
f8:26:f8:af:1b:5d:ef:ad:db:3b:4a:14:80:6c:c9:
83:60:b3:6f:aa:d4:f8:ee:cc:a3:c9:99:9a:f8:82:
59:f2:d6:0a:61:61:47:cb:5e:6e:41:94:3c:a2:2a:
e3:fb:ab:8e:d0:1f:3d:0d:74:88:b6:6e:8e:1f:a5:
8c:8d:7c:2d:f3:5a:15:99:da:02:a4:c8:c9:6d:d9:
76:11:9f:ee:d3:e4:1d:a0:77:7f:2d:56:b2:4a:2a:
5f:b2:98:6a:90:70:94:88:0f:83:5e:b8:4c:29:a0:
f0:9b:21:ec:4b:de:23:d9:8a:54:bf:6f:50:d7:08:
2b:83:ba:95:7a:c9:f4:74:1d:61:28:5b:60:d5:7a:
6b:b7:f5:cb:10:9e:55:4c:0b:57:4d:51:eb:4d:48:
be:03:99:db:7d:f4:0c:c4:ed:c1:0f:d0:2b:72:6b:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:7C:79:3C:01:7E:6E:5D:5A:77:40:99:16:48:BE:EA:7E:03:84
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c0:62:a3:4f:19:7c:85:15:d3:97:1b:c1:76:58:60:d4:b1:
8c:56:be:0a:24:c5:fd:58:d2:1c:0e:91:80:8b:43:b1:a9:62:
17:4d:49:23:72:a3:1d:76:5a:45:0f:cb:3d:aa:af:b8:98:90:
9e:09:96:63:1d:30:68:86:76:f0:b8:8c:10:74:6e:1c:df:4c:
be:75:2a:19:03:50:be:d7:3d:40:05:49:26:e9:a1:8e:a3:fc:
ce:bc:7f:64:d0:d0:b3:01:23:df:a1:b2:69:cc:dc:fd:1b:19:
1c:c8:50:c2:64:14:74:bf:16:af:df:46:27:88:48:95:98:02:
41:29:f9:28:1f:19:2d:7e:f4:05:c0:6d:a9:e8:10:8f:24:55:
36:88:cf:9c:bd:6c:e9:c3:9b:0a:eb:ec:88:73:fd:33:2e:b1:
8e:47:27:9e:ea:8a:90:67:29:2c:6f:38:2d:ed:16:cc:e7:90:
07:ae:55:f7:13:9b:62:ed:78:8d:e6:fc:2d:33:5f:d6:ab:d8:
7f:87:ea:5e:3d:09:d3:be:a1:c0:f9:af:dc:ce:99:b5:d2:b0:
78:a5:ae:da:12:20:7f:58:39:e2:1b:c3:08:d1:68:0a:a9:cf:
c6:6b:d9:ac:8e:1d:ec:3b:3b:6b:20:0f:ae:f8:24:05:e5:5b:
66:92:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:05 2025 by rpki-client