Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: RUXIako3PcMWKXZG/J4ulB3XRcJSylr4PkSPCvlY0HM=
Subject key identifier: F6:48:55:E3:A1:11:C8:04:62:8A:74:9D:44:86:A2:0A:AE:13:BA:E8
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 0198D705B3F9EC6947FC7ACA2FDE3A017F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1230
Signing time: Sat 23 Aug 2025 13:02:11 +0000
Manifest this update: Sat 23 Aug 2025 13:02:11 +0000
Manifest next update: Sun 24 Aug 2025 13:02:11 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: 6G7wj9dmtB6PVPhoxX7R6hxSEyewWwo8Qi/RhYCvKRQ=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b3:f9:ec:69:47:fc:7a:ca:2f:de:3a:01:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Aug 23 13:02:11 2025 GMT
Not After : Aug 24 13:02:11 2025 GMT
Subject: CN=f64855e3a111c804628a749d4486a20aae13bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:a3:89:0a:8c:27:14:85:40:a8:3c:5f:c6:
74:c7:62:20:68:bd:bd:aa:e3:29:17:c7:04:4d:a9:
e7:cd:64:bf:e2:d6:3c:12:a8:6b:38:29:eb:9b:79:
db:11:90:a2:8f:62:83:1a:4a:ef:62:87:e9:49:27:
f4:fe:c4:7b:92:6d:e2:79:ff:85:6d:2b:fb:2a:94:
8a:84:bc:8e:08:98:f5:91:41:7e:dc:2e:4f:c0:29:
f4:1a:80:0f:3d:a4:31:50:66:14:7b:ce:12:34:1b:
23:f3:e5:32:9d:e7:26:f9:0b:6c:89:cf:c6:8f:6d:
87:02:a1:e6:cb:2f:e8:4b:c0:43:db:24:f7:e4:2e:
c3:a7:8e:28:61:38:73:d6:24:f4:56:b8:2d:6c:16:
a7:c7:51:00:49:a0:27:4b:ed:d5:f9:5e:91:96:6e:
71:b4:0f:6f:e4:a2:25:b9:b0:b2:25:8e:57:f7:38:
d5:3a:1a:a8:68:21:55:5b:26:1d:66:30:73:e3:da:
44:d5:df:63:71:2e:e2:ef:44:69:8a:33:46:12:b8:
d5:ea:c7:c2:3a:45:8a:ba:8a:d7:43:46:1b:1b:d3:
4a:82:1b:56:8d:26:17:18:70:78:fe:9f:68:a3:ff:
2b:f8:fb:e0:30:f4:b3:18:11:da:ae:17:28:31:ba:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:55:E3:A1:11:C8:04:62:8A:74:9D:44:86:A2:0A:AE:13:BA:E8
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:f0:24:8d:6d:fe:99:f7:e8:b9:0d:7b:2d:0a:f3:bb:d3:
a5:66:ac:07:27:2c:90:46:b8:ed:72:1c:14:53:4e:a7:40:01:
34:34:97:1b:2d:6f:b3:0f:ce:53:e5:47:dc:86:6c:f2:79:34:
7f:b7:9c:8c:74:63:97:c2:53:44:dc:d7:56:58:60:8a:4f:b4:
23:61:00:1a:fd:47:96:fd:d8:f3:e3:bf:5e:3d:e9:69:d6:f9:
7a:ff:90:08:c8:c2:58:1c:da:c8:40:45:e3:f9:7d:4c:b3:3a:
e1:4c:d2:47:b1:65:a1:3d:80:28:af:e9:cf:68:cf:d4:39:24:
f0:30:80:dc:fa:85:e1:05:48:09:4f:75:de:6f:4f:15:4d:94:
06:a8:8f:32:67:46:f0:a6:7e:41:c5:74:d5:4a:da:02:e0:af:
cb:38:c2:23:99:9e:e8:95:db:48:e9:29:c5:8b:2f:0e:13:65:
10:c7:46:ac:a5:76:f4:47:e8:98:26:7d:bd:97:80:4d:42:48:
64:78:06:56:50:af:b0:56:c2:89:e6:7a:5a:6b:78:fc:65:ee:
71:28:b1:2e:96:5f:e5:b0:a1:3d:2d:3e:b2:fe:ef:c4:19:2a:
78:cb:ab:1c:a8:a3:f5:7e:31:2c:58:5a:03:5d:aa:2c:a5:bc:
7b:2d:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:22 2025 by rpki-client