Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: Gewxjdtzw/3W3S+iyVE5ali4ggg6ooszm5rSiA+usyM=
Subject key identifier: 78:96:40:19:19:66:AE:E3:17:17:18:A5:EC:C1:AA:9F:DB:96:BD:D9
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 0198D66126011EFB53A396CEA3470A4553FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: sAcNeL8NSpuw+pfrfNR7Sn1doS+73Hxmj0DUIXplz18=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:26:01:1e:fb:53:a3:96:ce:a3:47:0a:45:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=789640191966aee3171718a5ecc1aa9fdb96bdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:63:84:1d:7e:01:37:1f:0a:44:79:77:6f:
a4:04:c9:52:5e:a9:b1:9a:69:21:50:97:36:d7:ff:
fa:3a:19:e3:ae:d2:88:49:a4:e5:2e:c3:75:53:4d:
4a:41:31:14:58:fe:97:1a:b8:24:1e:84:63:2f:63:
15:d8:aa:d2:a4:b7:e9:73:12:04:11:84:3b:3f:3d:
fd:82:16:86:26:64:21:fb:01:84:e7:ee:4f:ef:ab:
cc:43:f1:4c:6a:2e:00:5a:34:e2:4a:bf:8b:de:86:
24:58:29:ab:40:79:f1:58:20:a9:e1:15:ae:f7:ee:
70:10:ef:c6:1a:77:39:13:88:ee:5b:ba:70:22:31:
8f:c2:5d:99:9c:07:d8:2a:d2:36:f5:63:4e:0b:dd:
a1:4b:a7:14:be:d8:f9:5d:4a:dc:60:ad:d4:2e:61:
1c:61:24:ae:3d:c7:aa:59:79:8f:ec:27:7d:49:71:
bb:e6:4c:ee:dc:ff:a7:36:78:ce:4e:a3:db:51:79:
29:0b:8d:c5:d4:2c:d2:5f:6a:54:f4:51:3a:af:b8:
3d:aa:70:02:c8:84:cd:61:67:a1:0f:c2:eb:3e:1d:
35:3f:7f:6d:c3:3d:f7:03:a9:8c:76:73:2d:43:12:
0a:99:f6:72:94:6c:38:fd:7b:26:9a:ce:3d:4d:a3:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:40:19:19:66:AE:E3:17:17:18:A5:EC:C1:AA:9F:DB:96:BD:D9
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:1b:8b:a6:60:2f:95:1c:60:68:f7:2d:56:b0:f7:31:8c:
fa:13:87:21:6e:ac:9c:d0:e9:1e:d5:74:d9:1a:85:72:8e:eb:
e2:4c:1f:47:cf:19:6e:12:90:64:9a:4e:97:38:bd:77:bd:a0:
4c:f9:33:2d:13:7d:b9:9d:1a:f2:95:50:3f:cb:dd:96:62:83:
47:06:34:ed:c7:cd:8b:e8:0d:a0:34:24:68:40:84:21:2f:ae:
fb:11:5a:95:47:64:9b:ea:14:21:56:f3:72:14:0f:a5:70:60:
f3:c9:b3:6e:be:f0:5f:89:57:72:a8:6e:0d:d3:5c:53:54:a7:
29:e1:0a:c6:fd:12:3e:63:14:48:0b:03:42:c3:12:1a:20:cc:
64:5b:10:2d:fa:1c:c9:19:93:49:f0:5b:71:0e:28:d4:ea:4c:
c5:c1:5b:25:c9:09:31:09:26:d6:48:fc:f5:8d:f1:d0:3a:f3:
fc:fd:0b:9c:12:50:d4:27:2f:25:6d:ac:c4:10:da:b2:17:58:
fc:8b:2f:25:9d:29:f7:a4:b1:68:6e:11:95:6f:43:c4:1c:a3:
1d:6b:16:7c:73:81:56:42:67:ee:0e:5a:a7:72:20:67:76:56:
e7:3c:6f:2f:9b:83:95:2f:8d:de:36:45:f2:31:73:66:93:35:
d5:83:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:25 2025 by rpki-client