Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: V5jv+Va+rWs8/icq/zo0wnXjU66eEwKZPqZ3XzhFOT0=
Subject key identifier: 5C:6B:5E:AC:3D:7B:C2:14:1C:A7:BC:68:4A:42:5F:9D:B4:E7:EA:24
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 0198D8509B0C32897F8D7CFA0693EF1EF556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0D6E
Signing time: Sat 23 Aug 2025 19:03:37 +0000
Manifest this update: Sat 23 Aug 2025 19:03:37 +0000
Manifest next update: Sun 24 Aug 2025 19:03:37 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: /7nW/fufo1XGXbrClPpIhsWqOov3eU5kufj8/h3jIbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:9b:0c:32:89:7f:8d:7c:fa:06:93:ef:1e:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Aug 23 19:03:37 2025 GMT
Not After : Aug 24 19:03:37 2025 GMT
Subject: CN=5c6b5eac3d7bc2141ca7bc684a425f9db4e7ea24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:3f:29:e5:15:ef:cb:15:ee:3f:e0:9a:26:
96:59:b0:8e:46:96:22:6f:a6:21:be:f6:c8:6f:b5:
e0:08:b4:62:0a:fe:eb:5f:f4:86:8c:5b:27:04:44:
09:95:23:76:42:77:8f:ed:a5:37:2a:0d:db:7b:4c:
ea:03:a0:0e:da:03:0b:ac:0c:24:b0:cb:f9:6f:23:
23:3b:f5:e1:ac:a8:0c:89:09:29:0a:1e:d1:56:bb:
d3:a8:8c:5d:98:c6:a8:e9:82:e6:d0:2f:2c:d9:0f:
fc:dc:70:99:0d:19:76:0f:f0:a2:72:83:ab:16:47:
f2:49:2c:ec:72:57:31:4d:c1:2e:03:e6:9c:94:db:
08:83:b3:db:14:9a:32:18:13:7b:9f:c1:69:19:59:
3c:e6:54:bd:43:77:db:cc:e8:44:2d:93:79:50:a6:
8d:f2:31:63:31:db:21:11:d3:74:f6:09:45:34:76:
dd:40:3e:f3:4c:71:a5:34:c4:22:68:06:1f:87:99:
76:34:c0:0f:44:e9:ce:84:4c:ff:84:10:a3:60:8b:
b8:f7:dc:c7:39:82:81:75:5c:f9:8a:74:74:4e:ff:
de:f7:32:c3:2b:31:96:49:fe:58:ae:5f:c2:d7:e0:
ad:c5:c4:ca:be:3d:34:3d:c3:dc:3c:f0:07:26:8c:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:5E:AC:3D:7B:C2:14:1C:A7:BC:68:4A:42:5F:9D:B4:E7:EA:24
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:05:8b:d9:20:66:fe:8e:80:21:23:04:94:fb:a6:4c:86:
c7:4f:99:2a:f8:72:8e:6b:54:6b:73:e2:cc:00:11:d9:cb:47:
1a:f8:0f:0c:97:86:d6:ae:a4:74:ae:50:f3:b2:fa:a6:e6:98:
a5:d3:ce:9c:90:0b:59:00:6f:63:4c:58:0c:4d:7b:65:5a:4e:
b1:f5:c3:cf:ae:e4:22:ae:a7:93:5b:f5:3d:d4:40:88:a8:7c:
7f:a5:9e:9f:c1:8c:b4:d7:5d:33:d5:11:a6:fc:5d:c0:f3:a1:
30:8b:e5:00:4a:1d:94:50:c2:3b:84:33:7b:bb:0a:87:d6:5f:
34:2b:26:c0:fe:44:d9:d4:a6:17:4f:fb:4d:e1:01:7a:37:ac:
82:30:3b:fe:06:f1:6f:67:8b:df:bc:3d:7c:6f:dc:b7:16:81:
26:4e:2f:e6:13:e0:20:1e:dd:ed:3e:f8:12:69:2a:15:61:c3:
e5:5a:64:3e:ec:41:79:c1:d4:7e:71:ad:38:b2:d6:8c:48:7b:
bd:a0:e1:37:1d:17:db:aa:75:27:f1:9b:20:a1:2d:0b:65:66:
8a:9f:7f:e6:c9:26:10:c3:56:4a:ed:38:26:a2:98:74:f4:bd:
85:de:a1:51:39:92:c1:37:a7:01:f7:7d:33:d2:7c:f0:1f:63:
9d:7c:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:17 2025 by rpki-client