Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: tZKRjaZT2weuEXfvugv4p3LPzA2y3xN+AZ5tBmOCuBY=
Subject key identifier: 0C:87:4A:3D:A6:0A:D4:7C:DE:AC:E6:81:1B:07:5A:C4:E3:E8:CE:12
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 0198D4E094961D4DC9A2149F6BF4F7C47296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: psGwptQTgina1R8uIRJXbGBLWtDHrFGTDK8EYwLvWz8=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:94:96:1d:4d:c9:a2:14:9f:6b:f4:f7:c4:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=0c874a3da60ad47cdeace6811b075ac4e3e8ce12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:33:80:1f:ba:86:90:4a:9e:40:13:96:5b:
76:ce:fd:59:e1:df:53:aa:d9:72:13:84:82:c4:2d:
86:73:0c:39:c5:35:f0:73:fa:ad:83:ac:f7:b4:fd:
a6:cd:3c:b4:8a:46:56:17:bd:e6:f2:af:bc:c0:4f:
bf:41:b6:c4:67:cf:12:3f:98:cc:bd:8a:76:19:00:
d1:7b:57:ac:bf:0b:01:c7:b7:ae:35:27:8e:54:56:
9a:5a:84:44:94:f9:8c:a4:4f:c2:08:c1:a0:1b:88:
96:4a:95:bd:04:44:cf:a8:93:87:d7:d7:43:63:04:
d3:17:05:4b:6c:27:35:d1:e5:e4:79:2b:c9:a5:ab:
b0:c8:0e:d2:89:18:55:b9:af:44:7c:db:0d:e4:65:
be:84:0f:28:9d:b1:19:47:15:41:fd:cf:79:e4:a3:
18:51:32:78:14:df:27:52:0a:ef:47:d3:a7:be:b5:
8b:b7:5b:d2:00:d1:77:b9:e0:69:cd:f3:d9:e1:56:
35:c7:9a:93:43:53:a9:f3:f1:84:86:a6:ec:1f:32:
5f:7c:32:09:13:1a:9b:85:1c:15:41:4d:f5:54:35:
6a:5d:6c:17:89:dc:27:4e:b0:ea:e3:71:05:88:d2:
71:0c:6d:23:77:a7:ae:3e:2b:c5:bd:58:37:53:95:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:4A:3D:A6:0A:D4:7C:DE:AC:E6:81:1B:07:5A:C4:E3:E8:CE:12
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:85:25:ef:f8:8c:3e:68:dd:ac:08:7a:ec:45:2e:af:2e:5d:
e3:51:a5:0e:01:b0:4e:eb:90:f9:54:03:91:b4:a6:13:ab:77:
8c:ac:a5:4e:41:c3:7d:4e:e9:7e:cb:28:44:24:1d:15:63:d2:
29:d2:2d:16:e9:e8:31:af:38:66:e1:c7:a0:55:53:7a:07:a2:
e6:71:67:b3:5d:ce:03:ac:4f:30:9a:b4:fa:83:3e:b4:07:3f:
88:f6:fa:19:61:96:ec:f5:11:0f:d1:a8:e7:2a:d1:a3:47:58:
21:62:ba:58:44:2e:a3:2a:f1:fd:21:cd:14:e8:5f:b6:fe:e1:
8a:99:96:13:c4:be:be:aa:55:46:c1:01:bc:ff:a6:c2:3c:55:
13:8a:3f:e1:6f:17:1c:1c:46:1b:b0:7b:23:30:97:07:06:d8:
83:51:6e:84:92:5f:a2:26:23:94:fb:9c:e6:c8:fd:ca:f0:cb:
8c:2f:c5:03:d0:b4:5b:d8:6e:95:c0:3a:9f:47:53:0a:06:09:
4a:9f:ac:b8:bd:77:4d:8d:6c:e1:c7:bd:4c:61:f8:fb:51:85:
a2:e4:a1:7b:ab:dd:79:4f:04:60:95:ad:26:8c:60:54:7b:d5:
66:fa:99:48:4c:50:1a:0c:0b:15:c3:91:0e:bd:9e:43:8f:84:
46:2c:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:35 2025 by rpki-client