Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: G7fc9sj/0L5lJDGr4ifNuKn8h6bRcK9RcSrLxLq9dqA=
Subject key identifier: C0:DD:8A:7E:B6:38:51:BF:71:9C:50:F4:0A:E2:52:61:43:A8:CA:3F
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 0198D7A8DD9CB37CE22A6139A5E6CD2CC39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 070B
Signing time: Sat 23 Aug 2025 16:00:24 +0000
Manifest this update: Sat 23 Aug 2025 16:00:24 +0000
Manifest next update: Sun 24 Aug 2025 16:00:24 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: Cht8/6wqtdDU+1DKts9pTseKgNNZt/qwGmF7lV7ymgk=)
2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:dd:9c:b3:7c:e2:2a:61:39:a5:e6:cd:2c:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Aug 23 16:00:24 2025 GMT
Not After : Aug 24 16:00:24 2025 GMT
Subject: CN=c0dd8a7eb63851bf719c50f40ae2526143a8ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:4e:28:df:21:60:8d:35:8d:0f:73:03:65:
30:bf:1b:00:73:04:4f:ca:14:4a:ca:8c:72:88:2b:
85:c1:40:92:60:c3:29:f3:4d:5a:61:92:63:4f:86:
eb:c3:a8:d8:de:bc:6d:87:8c:35:c8:0a:fd:77:de:
c5:33:08:3d:bb:c5:1b:b6:73:eb:3d:ba:7d:cd:4c:
b0:11:29:29:51:e4:1d:df:1a:f3:f0:19:df:67:14:
4c:8d:93:05:31:ef:7a:af:f1:46:5a:be:ee:9d:4b:
bd:a5:bd:53:b1:3a:90:8a:5d:a5:7a:c1:90:60:e1:
ae:2f:bd:f1:9a:50:ee:1e:9c:58:fe:e3:d5:04:47:
5c:a4:3b:22:79:70:44:69:52:aa:24:89:7a:00:40:
55:42:87:ac:50:19:47:5c:d1:f3:2b:c3:95:00:88:
8d:e1:ab:20:17:e3:26:11:d7:9c:60:03:9c:55:1e:
2f:33:b1:4d:d0:ad:2e:dc:12:65:74:2b:da:14:38:
f0:2f:ed:39:cd:73:d8:a5:05:c4:f0:3a:f2:d9:59:
fe:f5:b8:80:1e:ab:1a:b9:74:24:4f:36:d6:5e:cb:
21:21:77:27:75:5a:2e:c6:ed:11:a9:1f:4d:28:53:
da:2d:68:8a:62:39:f1:f7:a6:21:c5:e9:3e:0a:04:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:8A:7E:B6:38:51:BF:71:9C:50:F4:0A:E2:52:61:43:A8:CA:3F
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:98:86:8a:22:f7:33:7b:32:d6:6f:d8:05:1d:d7:dd:75:
e1:f4:d5:30:57:57:98:79:8a:14:10:76:44:30:33:0c:8e:be:
5d:56:f3:fc:00:a4:b9:87:d1:36:01:b1:ae:4b:e7:48:24:26:
c3:b3:e5:e9:55:3e:2e:92:a3:c2:6c:ba:dc:ab:37:31:b8:62:
26:33:b2:f6:bd:e9:58:1a:c2:cc:04:2f:16:63:f3:16:f5:91:
33:35:d2:65:d2:2a:74:ba:f0:61:ad:61:1f:70:96:15:b7:c8:
f2:79:a7:db:ee:44:84:56:db:74:f2:5d:6d:87:30:c9:ee:76:
35:d7:5a:86:fd:c7:45:ec:53:9a:e0:62:f6:6d:a7:a1:12:3a:
46:70:67:b0:4e:86:8c:7f:78:ee:b0:8d:7a:e1:22:ba:c8:11:
d8:76:b1:8f:06:b0:ea:f0:c9:db:cd:6f:a2:09:97:82:09:95:
15:30:fe:3a:d9:ed:93:e4:cc:22:3f:13:4d:a0:f8:92:d3:5f:
e8:dd:7d:66:a9:9e:59:82:c1:34:db:36:c5:c1:0a:5c:cf:7a:
d0:6d:ce:cc:4d:e4:81:ae:b0:ea:02:dd:ba:c8:43:2e:0d:1c:
2b:e8:88:24:7e:2a:a4:7f:b7:c5:6e:14:6a:a9:c9:d1:2f:64:
b7:2c:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:58 2025 by rpki-client