Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: /1izJFe2h1/uBL+YTHiuvwJ2U1f+xFuOcjvwBWbbIzw=
Subject key identifier: 74:9E:59:A5:07:9C:93:B6:2B:6F:57:69:FA:A5:6D:7C:04:DE:EE:54
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0198D4A7E158A3E4FC07B76B7EBC4E9656CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0989
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: sSOFBRGOKpaiVTrVDgi42MoDWsrRzzEEosvSKPlHrnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e1:58:a3:e4:fc:07:b7:6b:7e:bc:4e:96:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=749e59a5079c93b62b6f5769faa56d7c04deee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:ea:14:da:36:99:b7:a8:f1:c2:2a:de:46:
67:54:a2:aa:71:f5:33:5c:d5:8e:19:c3:13:ee:39:
87:2e:1c:63:90:a7:51:57:c1:49:45:ab:e3:16:9b:
86:f1:60:0b:70:ce:74:6f:9f:a7:04:3d:28:bc:b5:
98:35:7f:58:b1:4e:a1:78:15:46:38:5c:56:ee:51:
26:7e:43:9b:72:59:7b:c7:06:a0:69:8f:43:c2:0b:
c7:f7:39:07:dd:23:2f:bc:d5:8c:36:07:88:aa:9a:
46:73:34:88:fa:32:68:5c:6f:ed:98:1b:04:a6:66:
9a:55:25:2b:87:33:4a:05:96:7a:32:ab:8d:7f:4a:
f2:03:82:63:73:16:fc:d1:4f:47:45:8f:56:20:5f:
46:36:4c:5f:3d:1a:21:96:7e:2e:48:cb:1c:c3:e0:
ff:67:98:20:72:99:b6:29:eb:86:ff:02:ac:e7:7f:
9d:a9:80:6f:96:01:29:09:27:fc:39:34:c1:9b:78:
2f:c3:9d:af:75:79:37:88:77:93:f1:c4:c1:18:97:
0f:8b:e8:7b:c4:92:a3:c0:04:82:73:f5:bc:7e:11:
6f:0b:ad:27:44:ce:2a:b8:3b:41:a9:6e:f0:a8:35:
64:e1:36:fc:54:f2:9d:82:b6:10:c9:72:dc:bb:b7:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:59:A5:07:9C:93:B6:2B:6F:57:69:FA:A5:6D:7C:04:DE:EE:54
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fe:4b:13:06:f6:c3:48:90:d2:29:85:88:77:29:af:3e:97:
7f:cb:66:82:a9:9b:d2:64:40:e6:3c:08:c0:32:40:e2:51:75:
e6:54:7c:7f:41:c1:7c:a7:a1:c9:46:97:42:34:b5:0a:cc:c2:
00:bf:20:a0:c8:e3:8c:d4:33:41:77:94:ae:75:b4:ac:5e:54:
32:3b:c3:16:9a:d6:87:e5:96:1b:24:9d:3b:67:e9:30:5c:4e:
d2:a3:0c:3d:59:b5:c2:7f:0a:7d:ed:25:2d:1f:73:b8:b5:e1:
98:49:6d:7b:18:10:36:71:a3:92:a7:26:ba:e4:ac:1d:21:13:
65:08:c1:65:c5:1c:f3:57:b9:c0:51:60:d6:e2:ef:ec:67:48:
07:d6:06:38:dd:d9:6d:86:02:a1:72:d8:81:d8:c7:65:1b:ae:
7e:53:5f:c8:ff:25:b6:de:96:13:33:8e:6e:54:17:7f:91:90:
81:3f:d3:c3:1b:e2:7a:a2:db:e1:04:cb:d5:24:8d:15:5c:89:
7a:4a:f9:8c:2a:b4:35:cd:8c:7b:e6:26:24:49:d0:c9:0f:d9:
bf:01:ef:7d:5f:88:25:1e:45:27:22:ab:99:c3:22:32:b3:95:
77:91:f9:54:8d:75:df:66:ee:11:dd:37:30:2d:11:f7:fc:ad:
f3:ec:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:04 2025 by rpki-client