Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: 8qABLtqq8eecfw90RofO2/kiEYgJ+sckB1/Oq3tGPe4=
Subject key identifier: A2:35:75:2B:EA:DE:D4:13:1B:7A:51:28:E3:B0:FD:A4:B5:4A:6F:FF
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 0198D6CD589C29DE2871BAFB60DC72232B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 065D
Signing time: Sat 23 Aug 2025 12:00:38 +0000
Manifest this update: Sat 23 Aug 2025 12:00:38 +0000
Manifest next update: Sun 24 Aug 2025 12:00:38 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: ZdE2Ef/JbwmqDLmZXWHsGxG8A1j8dN/DKe5749WP/04=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:58:9c:29:de:28:71:ba:fb:60:dc:72:23:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Aug 23 12:00:38 2025 GMT
Not After : Aug 24 12:00:38 2025 GMT
Subject: CN=a235752beaded4131b7a5128e3b0fda4b54a6fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:de:fb:a5:01:ba:41:31:56:11:34:ad:77:
45:a2:6c:fa:54:4f:ed:39:56:5d:91:3f:1b:41:f0:
2b:8d:f7:84:2d:25:d0:f9:a8:05:6a:93:21:58:68:
22:6a:fe:c8:78:5d:20:f6:78:6c:a4:dc:c9:d2:4d:
cc:71:81:d6:99:a5:d8:29:14:3f:88:ae:f3:42:c9:
42:80:9a:f0:88:59:30:33:e9:92:b2:21:61:d2:63:
fa:bd:e3:6d:be:fd:74:32:9a:60:7f:c8:82:69:2d:
90:10:b6:c3:22:bd:6c:49:6e:da:ec:fa:1a:0a:6a:
86:14:4f:4f:f0:0e:b6:7f:73:fd:12:be:12:c9:a6:
64:47:0e:bf:37:b1:a8:13:7f:45:a7:9b:b5:6b:eb:
8a:58:bd:f5:70:ea:61:43:52:97:5a:53:c6:a8:64:
8b:99:08:62:43:e7:65:07:48:36:a7:b2:ee:04:43:
ab:b7:85:e6:ca:5b:4b:97:c1:12:53:cc:9c:f9:e4:
36:42:4a:17:35:af:44:e5:3d:76:37:71:ef:7e:b7:
9a:99:59:4b:73:b6:e0:30:fd:92:e7:1f:5b:3f:9b:
02:37:06:a4:65:b5:49:e0:13:72:4f:c4:3e:ef:69:
91:83:62:a0:37:93:0c:36:ba:5b:67:9a:1d:cf:c2:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:75:2B:EA:DE:D4:13:1B:7A:51:28:E3:B0:FD:A4:B5:4A:6F:FF
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e4:4e:36:4e:38:1a:c6:9f:14:4b:a1:f7:98:fc:b5:65:25:
5a:43:df:3a:3c:3d:0d:5a:84:ee:43:6c:e1:ff:a5:6e:7f:96:
36:98:ee:70:5c:a9:1b:b0:cc:14:5e:15:11:67:65:c1:c7:10:
1c:27:7a:e4:23:2e:7d:ff:25:89:81:bd:69:e9:b9:03:ec:ab:
b4:8c:97:4c:d7:3a:53:b6:15:30:c7:64:f4:31:4f:f0:29:3e:
f8:fe:44:48:0f:7b:c6:96:44:11:68:ff:4b:9e:14:b0:5c:82:
9c:00:c0:08:94:61:7e:ec:15:09:b3:e8:b1:99:35:26:78:de:
d0:23:9d:89:48:4c:44:ed:66:94:2d:3b:9b:d9:7a:74:2c:fb:
d6:d0:1e:b8:55:86:0a:00:97:e6:3d:6a:d6:ee:3a:df:53:61:
28:61:f8:ed:32:1b:fa:fd:75:22:08:f2:d5:b1:34:29:ea:c5:
f3:3a:76:0c:ae:c5:99:eb:b5:9a:9c:21:f1:25:62:cc:c3:7c:
86:cf:5e:5b:37:c0:8c:b8:fd:cd:15:1c:1e:c1:c2:89:6e:4f:
08:04:cb:5f:65:16:94:e3:19:98:77:a8:1c:bf:92:40:53:ab:
5d:6e:19:6c:b1:3c:ad:fc:5c:b4:4b:ea:7d:b5:16:c2:29:36:
0d:41:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:34 2025 by rpki-client