Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: azB37QTT9tYVjG26Y9NPjD5+c5yhrLSOVd/Kqzd1gQg=
Subject key identifier: D8:A8:93:DD:68:2E:E1:16:67:D2:92:6A:42:95:46:58:71:85:CC:2B
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 0198D65FAF2C2110535D21272FA5C860005C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0318
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: vC1eM/BNZaSSv+Jd07vSu3Hz4yN/yzNpMojQvMreD7k=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:af:2c:21:10:53:5d:21:27:2f:a5:c8:60:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=d8a893dd682ee11667d2926a429546587185cc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:83:97:e0:cf:d9:6d:7e:70:91:1a:3e:b6:
2e:62:90:e4:8f:73:99:59:07:c5:af:c2:3d:9c:69:
51:79:7a:87:35:33:b2:3f:af:6f:66:bc:2b:b3:7a:
25:6c:a5:69:16:7e:d8:6b:18:26:90:f6:b3:7d:e9:
b3:53:ce:41:76:a8:d2:01:13:44:8f:d6:be:7c:64:
06:31:78:ea:76:2a:47:ed:cb:a4:c5:50:c2:02:23:
7b:c0:e0:fb:06:9c:cd:f4:e6:45:5d:b8:5c:60:65:
28:c4:5e:61:6c:14:0d:ea:1f:49:de:34:eb:89:7a:
13:d7:6c:d5:c0:6e:6d:60:b7:43:cd:ce:2c:69:62:
74:b2:63:a6:cc:f3:36:c5:03:f2:e1:e9:84:ac:1a:
a2:19:7b:ba:b5:e5:dc:f3:ee:f8:f1:a2:37:b7:ab:
4f:d4:ca:58:09:57:9d:49:04:20:14:d5:2c:40:d6:
fe:0a:4a:a7:be:f9:43:41:47:40:22:b1:ed:d6:08:
fb:6b:4c:cb:c5:f1:35:ab:d9:2a:7f:c0:83:0e:f2:
eb:8b:3d:8e:c2:d0:67:31:b3:4c:dc:12:b1:9d:45:
85:a2:6a:cc:e9:92:ec:84:bd:ca:d5:a4:a4:b9:3c:
ef:bf:18:33:ce:4a:dd:1d:78:c9:67:8c:fe:cf:3f:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:93:DD:68:2E:E1:16:67:D2:92:6A:42:95:46:58:71:85:CC:2B
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:2b:af:cd:41:cb:d0:30:59:44:8a:a5:09:8e:cf:98:18:
2c:9e:8e:1b:c6:17:8a:06:f8:55:f7:4f:69:f0:b7:08:51:b1:
ac:99:3d:c8:19:2f:9e:54:a9:6b:e0:df:4f:4f:2f:44:7b:0e:
b4:81:00:c2:45:a8:f3:3b:46:17:a9:5d:14:d5:db:3f:c2:9e:
89:4b:39:ca:d1:d0:32:00:8e:e1:0f:06:9f:d7:24:73:24:0a:
29:b1:6b:94:10:d6:2b:35:7f:04:6b:a0:42:12:d9:3d:17:76:
d3:75:4b:d9:0e:77:3e:58:85:cf:91:94:b5:74:c1:5c:34:85:
e3:09:95:b8:6f:2b:df:3b:98:f1:d8:4d:1a:98:4f:24:9f:d8:
a3:67:1a:e3:32:9f:2d:ee:2a:d6:f1:01:5d:bf:e7:d7:31:f2:
a8:62:73:ec:a8:b4:ba:fd:67:90:ab:5f:26:d4:47:ff:bc:c0:
a6:dd:8c:ec:94:81:7e:97:2f:2f:ae:ed:ff:8d:13:78:11:71:
05:2d:ff:8d:19:f7:c3:62:b8:99:f6:20:65:28:f8:e0:96:92:
e5:44:21:59:ba:99:e0:9c:f1:35:a3:59:6c:98:cd:2e:33:ad:
bb:ff:db:58:ee:17:61:d6:28:30:48:34:a0:c4:a0:d2:fc:da:
59:41:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:29 2025 by rpki-client