Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: BS9FIGjjHfi410E5w+IUKMGf5R1sCNRPaEJJspr1B4k=
Subject key identifier: 4F:88:07:91:FD:63:D9:C5:C6:C6:3B:F7:50:8D:C3:61:83:7F:57:5A
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 0198D773A47249EE509D941C78F9C634053F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 10BB
Signing time: Sat 23 Aug 2025 15:02:16 +0000
Manifest this update: Sat 23 Aug 2025 15:02:16 +0000
Manifest next update: Sun 24 Aug 2025 15:02:16 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: fegVf/cy4ZOi46QneQUiKAHklxSl/GIPJhBiZZJeScg=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a4:72:49:ee:50:9d:94:1c:78:f9:c6:34:05:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Aug 23 15:02:16 2025 GMT
Not After : Aug 24 15:02:16 2025 GMT
Subject: CN=4f880791fd63d9c5c6c63bf7508dc361837f575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:6c:9f:eb:0a:f9:52:aa:72:99:f3:57:dc:
1d:94:4d:36:88:d6:f4:ed:55:4d:da:de:14:8b:a1:
c5:8d:6c:36:16:b3:de:61:9a:4d:57:cf:de:ae:6c:
29:31:58:53:37:c6:e7:81:4e:48:8a:92:1c:ad:b8:
ff:93:e2:dc:c0:f8:92:81:b8:26:d1:8e:8c:4a:1b:
b1:4c:e9:0f:b8:86:01:f2:03:d2:49:81:7c:9f:c8:
04:58:f0:c6:88:77:20:b1:57:ba:c9:1f:e0:fe:f6:
b2:35:57:8c:bd:f8:ac:c8:63:fb:51:a4:e5:b4:4f:
7f:74:21:9d:6e:a3:4f:65:ef:18:e4:9b:63:7c:91:
5a:c5:a7:0a:c1:8d:6e:01:e2:97:20:f1:11:de:88:
28:ac:7d:d8:ee:d0:fb:e0:e4:9d:1e:e6:d7:77:aa:
59:1d:71:53:d5:59:3c:e7:2b:71:c5:78:d8:46:d0:
12:04:9a:3a:39:9d:68:1f:52:c4:e2:92:a8:85:2e:
df:42:55:66:1d:88:47:26:06:ff:f0:c7:0e:47:30:
cb:56:5a:7b:d0:a8:22:8a:1a:a1:0d:e4:76:35:27:
84:b2:b4:02:dd:ea:76:bd:7d:f9:b1:45:88:9b:13:
2c:f8:4f:9e:52:58:a7:55:d8:59:41:7d:1d:b7:b1:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:07:91:FD:63:D9:C5:C6:C6:3B:F7:50:8D:C3:61:83:7F:57:5A
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:15:2f:1e:74:ce:ba:89:e4:c6:9d:dd:eb:bd:73:08:47:4a:
a4:c9:5a:fe:cd:a7:2f:ab:27:c8:06:e5:1b:fd:22:2a:ef:a6:
b2:8e:ad:95:f2:c6:70:71:6d:4a:22:7c:07:34:f5:a3:62:d8:
35:28:5e:1a:b0:2c:97:9e:87:6e:51:6d:62:76:53:c7:b8:e3:
a7:d7:a9:92:f9:a8:8e:b2:69:42:9e:dc:7a:4f:60:04:43:23:
cc:52:ad:5d:88:95:fd:af:9b:20:c5:6b:b8:1b:63:f2:8e:54:
d2:78:3d:f7:ba:3f:70:19:ea:d1:4e:a8:b3:ae:51:61:a0:24:
88:5e:65:c9:02:6d:e3:84:07:03:13:64:64:81:e8:eb:77:f4:
60:5a:d7:f0:45:65:b4:d3:f4:3e:c1:95:35:1a:84:9c:b9:9b:
5c:46:bd:da:71:32:09:49:9a:16:46:bf:66:8c:ad:53:14:bc:
62:ae:0b:dc:2a:75:54:77:b5:d5:d8:de:f4:14:9a:0e:39:c6:
d0:d6:fe:07:dd:91:b6:28:01:aa:ba:54:85:f5:00:cd:04:1f:
ef:6a:45:93:dd:d2:aa:0b:a4:32:43:6e:c0:0b:5f:a9:56:7d:
99:6e:ff:f9:2c:c6:4e:43:cc:7a:bb:ef:af:2b:86:54:5a:f8:
74:76:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:25 2025 by rpki-client