Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: jXLIagtaBYioPulp1R/jCzE5QH63P212x4N7hgiWw1w=
Subject key identifier: FF:73:43:54:84:7C:7D:7A:AE:9C:8A:51:F1:B8:0C:A5:C0:9A:2A:77
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0198D4E0C732CE7CD5F3FC93BA4BAA46222B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: XPgz4+6zSfdLWgtWt4lY5e70WJx9RIu+IKbbx4fEJ48=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c7:32:ce:7c:d5:f3:fc:93:ba:4b:aa:46:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=ff734354847c7d7aae9c8a51f1b80ca5c09a2a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:95:96:4b:2b:44:6b:7c:de:9e:43:02:56:
6b:68:6c:09:de:3b:04:7d:ca:40:af:4f:f5:2b:70:
4b:28:b6:ac:4d:d6:8d:77:ba:2e:88:2b:fd:cb:2b:
b6:88:d5:ba:6e:eb:8a:2f:76:60:87:17:f2:4a:dc:
fd:3d:b1:cf:70:c1:9e:8c:b0:47:a0:56:8d:26:c8:
33:d0:42:f3:5e:c0:bf:58:d3:35:e9:a7:43:b7:88:
b9:41:78:fa:9e:31:02:30:38:25:ba:a7:13:a2:80:
9d:ad:7c:c4:0c:a0:17:25:cf:c7:ad:8b:3c:b9:0c:
d2:aa:cb:90:4f:90:9d:58:83:26:57:7d:ae:81:b8:
94:e0:db:9f:5c:b5:20:1f:aa:24:1c:67:8c:b6:fa:
8f:9c:4c:8a:02:dc:08:82:89:ea:c0:27:96:d6:85:
4a:1e:cc:77:07:79:5f:58:be:1f:6c:96:72:04:83:
fa:2a:53:ad:66:d5:74:d8:46:69:36:38:5c:51:73:
c2:b3:51:28:33:db:97:0e:c3:cd:13:a8:7a:91:05:
b2:26:7d:44:97:41:2d:8e:b8:cd:e6:10:17:6a:d5:
4a:aa:c3:b4:35:ab:3c:1b:cf:3c:a6:ca:ee:97:02:
e0:09:8c:66:ff:0b:41:45:f0:e6:c0:d6:5c:ef:79:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:43:54:84:7C:7D:7A:AE:9C:8A:51:F1:B8:0C:A5:C0:9A:2A:77
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0b:7f:0f:4e:c7:ff:bd:43:00:25:a7:be:49:41:54:88:ab:
c5:77:0c:1d:78:4c:1b:2b:c4:36:3b:ec:66:ec:26:83:b1:93:
4a:4d:d9:08:56:90:d4:aa:a2:48:c4:a3:36:95:43:82:a3:ba:
ef:51:a9:b8:2b:5a:22:1b:69:de:d1:1a:91:91:05:a5:d9:7b:
f7:3e:99:8c:24:03:e5:54:b0:a4:a3:2b:9f:fb:a7:62:dc:ca:
09:2d:3a:43:2d:80:67:c1:d8:5f:ff:85:29:18:71:ff:da:39:
e8:1f:2e:c5:48:e2:1f:39:2f:13:ca:06:28:18:d1:f3:11:99:
dd:c6:eb:fe:1f:9e:af:22:61:b7:d4:ae:72:2b:b4:57:56:c8:
65:b7:fa:b6:04:1a:41:b4:bc:47:eb:30:92:86:d1:c8:d9:a5:
d3:85:b2:4c:d3:1b:12:2f:da:7b:f7:99:8c:a6:a8:54:67:24:
cf:d8:d9:cb:14:e2:70:03:f2:b0:30:75:17:05:c4:b7:70:3b:
19:ca:76:c5:02:9f:a5:e8:5b:2e:e2:02:ec:7d:79:53:a8:72:
2b:03:ea:6c:19:f9:a6:03:bb:f5:fe:d1:01:a5:c8:77:be:c9:
5f:b3:40:fd:9d:c8:e0:fe:cf:28:22:77:2e:21:4c:a8:9b:4f:
23:4f:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:27 2025 by rpki-client