Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: LB9jP+S4ZKBTnGWi9aC70SqQbQ4IWrF0tzVwiL2w50I=
Subject key identifier: F9:27:E2:9B:ED:06:8D:79:F0:C2:AB:0C:52:89:31:A0:41:F7:42:D8
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 0198D4E02DCC5CCCBB0CABDF63A0717E825B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: wqbunAu0R4ctCfLgVEXdVB7tO+a2f2OL0OkZpJbGwQM=)
2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:cc:5c:cc:bb:0c:ab:df:63:a0:71:7e:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=f927e29bed068d79f0c2ab0c528931a041f742d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:8d:47:1e:66:9e:9f:6b:41:cf:a8:5b:3f:
72:ad:51:ff:8b:2e:17:1c:26:fc:1c:34:8e:d9:29:
b0:3c:fb:e9:6a:03:98:00:9e:41:aa:e9:2f:10:b8:
64:91:02:d9:b7:be:19:c0:c6:ce:ae:57:76:aa:23:
60:99:be:88:a6:75:b0:e3:5b:c6:9e:ab:15:af:a2:
66:84:d6:ca:75:f5:ee:4e:83:49:92:1a:b2:09:bf:
5f:76:e6:57:b5:65:19:3e:6a:c3:aa:91:aa:7d:d9:
5d:21:48:d8:91:93:c2:35:0e:14:ef:78:8c:9d:32:
e1:01:47:dd:32:6d:90:6f:b9:3f:07:4f:2e:d9:a8:
40:bd:02:3c:5f:9f:25:60:01:fa:66:00:a0:c8:03:
c0:cd:2c:2b:88:89:fb:11:42:42:b3:7d:47:60:e9:
aa:78:dd:b6:df:53:8a:a0:f1:8b:56:9c:d6:ef:bc:
c6:a8:08:85:44:31:0d:d0:c0:af:3a:86:51:7d:9f:
1e:92:97:8f:7f:a1:cc:21:1c:d3:68:e5:2b:55:92:
e0:0c:99:e3:f6:8d:43:fe:74:30:04:63:b9:6c:a4:
f6:a5:ff:ff:45:f2:91:f1:86:50:7e:fe:39:2e:ae:
2a:f8:85:1c:0b:47:71:67:dc:dd:4f:13:24:fc:f6:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:E2:9B:ED:06:8D:79:F0:C2:AB:0C:52:89:31:A0:41:F7:42:D8
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:2d:d9:7d:0b:07:b3:a2:c7:c4:43:fe:31:2f:01:70:a4:
34:62:6c:1a:c3:36:0d:68:cf:52:cc:36:0b:39:f6:43:8f:29:
c7:8f:1b:d8:83:5a:c9:8f:66:dc:47:26:9d:5d:01:4a:2b:ca:
a3:f7:59:a7:c3:c2:17:a2:93:ef:23:34:ba:da:f8:69:98:e3:
bd:81:60:4b:1a:37:7b:f9:4e:dd:4e:31:61:8e:7a:22:bd:bd:
1c:ae:47:c9:49:42:48:9b:5d:1b:1a:37:7f:10:b0:44:12:80:
cb:fd:5a:83:43:80:4f:ed:30:16:45:71:ab:2e:bf:c4:bd:22:
34:76:d9:b3:7f:67:ed:67:f4:b9:a8:9b:0a:bd:8e:22:f2:fb:
10:ea:7e:93:2e:6f:4c:26:d6:82:66:68:a4:f7:15:52:de:7a:
1c:6e:ce:22:cb:a6:bc:77:a2:7c:34:e5:45:28:ee:f0:75:be:
49:ac:51:c8:94:54:e8:df:55:31:f4:80:92:be:92:7f:46:fd:
c1:7f:87:01:d8:7f:91:af:3c:9b:72:f1:7d:ab:91:c9:3b:16:
dd:e0:27:37:cc:c9:8d:bc:91:0b:05:69:22:97:75:93:4b:f8:
c7:40:98:29:ea:9f:9a:fc:50:6e:06:f6:75:6f:38:35:4e:6f:
5f:5b:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client