Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: 4Of8dZZfhAf82laC4tWsK5zvzEDF9bOgVqci9G6xz0I=
Subject key identifier: 13:2E:A9:1D:36:CE:C1:AB:35:70:59:47:03:A9:97:9E:46:24:37:60
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 0198D66110C980602439AE12FFB2927CCB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: Myvus91TgouWQvJ1XY+yhF+fdAbJDbSqL7y87IH6eok=)
2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:10:c9:80:60:24:39:ae:12:ff:b2:92:7c:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=132ea91d36cec1ab3570594703a9979e46243760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:b8:64:6a:d5:89:95:a5:64:80:17:90:9c:
fa:70:60:2b:98:e6:3e:33:bd:c8:04:7a:73:69:cd:
82:83:ed:aa:7f:af:8c:9f:dd:cf:fa:57:7d:99:0e:
33:a8:a9:b2:55:b2:51:85:d0:c8:30:88:fd:eb:0c:
85:12:83:02:f0:51:f9:1a:62:9c:da:77:08:b1:c2:
d9:35:d3:80:b4:9b:a3:ce:7f:91:72:07:73:a6:a4:
f7:9a:bc:39:11:7f:f2:36:ec:14:9d:db:1b:4f:2e:
30:6b:b3:7e:e5:c4:01:a8:c9:78:a5:d1:a9:df:be:
e0:cd:15:e6:87:b4:e5:81:d8:68:3b:c9:7b:31:a9:
37:f1:7f:8b:27:e0:29:e0:14:ae:e1:45:a1:99:cf:
48:1f:8a:14:47:50:b0:19:3a:17:9a:c4:32:16:ec:
00:3a:75:d1:1f:f1:95:3e:22:08:ec:6e:9d:1c:69:
bc:4b:e1:bc:27:6e:f2:d5:03:71:2c:ce:f3:01:ed:
0a:db:57:e6:8d:8c:bf:e7:b6:a7:55:d7:8a:64:a7:
22:e0:f6:c9:eb:7e:c3:3f:ed:72:08:11:c9:1c:74:
26:16:53:6d:61:16:24:97:94:09:31:5f:6c:09:ec:
9f:a5:2b:7e:74:a7:32:38:99:8a:61:81:2f:1b:68:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:A9:1D:36:CE:C1:AB:35:70:59:47:03:A9:97:9E:46:24:37:60
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:a0:6a:84:2b:1d:71:42:0e:5b:b0:83:a9:0c:15:9f:62:
74:a9:62:1a:3a:9a:0f:02:5e:cc:c5:76:e1:eb:84:cb:67:ef:
0b:e6:40:50:88:e0:a8:20:be:e5:63:d8:c6:2b:37:98:ee:d4:
62:b5:29:ef:a6:92:2a:2f:90:63:1d:93:e4:3e:89:bf:fb:25:
92:5a:a1:d9:e2:1e:e4:27:ee:fc:ab:b3:db:26:27:dd:7f:e7:
af:7e:02:3f:d3:fb:d3:f1:84:95:e2:a7:1e:60:f4:b5:75:11:
75:e6:66:27:d4:68:15:36:15:e6:08:e3:60:d0:3b:04:d8:07:
29:dd:6e:1e:d8:c2:98:11:e4:67:2c:4d:cf:d9:64:5d:1c:28:
0b:3f:85:1e:34:b1:f5:d4:82:dc:79:a0:12:24:cc:fd:f7:46:
9b:15:52:8b:ed:60:8c:e8:3d:5d:27:19:c2:5a:a7:bc:69:c7:
c2:c3:ce:1f:18:a9:85:d7:a1:f7:31:07:30:58:3d:ff:04:30:
d8:0b:ed:69:30:ae:d1:cd:20:ec:69:f8:97:ac:8a:a4:73:d2:
33:a5:d5:cb:c8:e7:49:45:1f:f8:fb:10:76:02:3a:9e:3b:d0:
6b:a8:bd:31:c9:3e:c2:e6:85:a4:f3:31:96:43:39:a7:91:84:
8b:59:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:14 2025 by rpki-client