Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: 3hIh8f2LI/0aYiJPMG7tkG0QMcmTCrjS8hqtrG8z2VU=
Subject key identifier: 74:BA:E2:CC:21:EC:A9:B4:E8:41:C7:6B:FE:00:AF:1D:24:1E:24:9D
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0198D5BBC3C5A487D376933B593AB3D0BBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 12F6
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 2SMkUmLkGAsrZyEyCPYuPQsTWgPfyOEI8Q3q23pn+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c3:c5:a4:87:d3:76:93:3b:59:3a:b3:d0:bb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=74bae2cc21eca9b4e841c76bfe00af1d241e249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:5f:6b:56:41:a4:01:86:a5:37:3f:48:cd:
7c:67:bf:e0:cc:66:f7:34:6d:6e:7c:81:7e:c9:a8:
04:a8:37:c5:63:13:78:d9:b7:03:95:af:30:a8:d2:
d8:06:e2:d0:de:ad:07:86:ea:69:8e:a0:e5:19:80:
f1:3c:67:2a:77:ea:bd:a6:e2:4f:b2:71:29:d6:7d:
5e:ff:bc:66:9e:47:f1:41:8d:43:cc:12:38:75:6e:
26:45:68:8f:e3:8f:fd:65:f9:c8:e2:0f:a3:a4:56:
dc:14:00:43:34:81:8f:28:b7:e3:7a:b8:f4:47:83:
e7:41:81:3f:b1:91:18:ae:06:38:09:d0:82:1f:d6:
f7:ed:c3:c2:aa:4a:77:6d:28:ce:9a:e3:b9:3f:89:
2c:a6:b9:0d:c1:79:5d:34:8a:18:43:98:4f:fe:35:
a0:77:a9:b1:a0:0a:1c:13:5f:7d:6a:68:9e:ff:b2:
f3:e2:c4:06:e2:8d:15:54:49:25:07:6c:8e:b3:30:
b3:38:81:ac:97:af:4c:a7:9c:d0:51:4d:95:ad:85:
30:a3:df:51:5b:e7:96:f9:0a:c0:a1:50:ab:0d:31:
c2:22:b1:ee:a9:b0:ab:a5:99:c8:af:f0:1c:b1:60:
25:55:9d:7c:89:f7:70:bc:9c:c3:9a:a7:ec:04:64:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:E2:CC:21:EC:A9:B4:E8:41:C7:6B:FE:00:AF:1D:24:1E:24:9D
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b1:f9:41:05:a0:c2:05:61:47:62:27:62:a0:25:00:54:5f:
f5:c9:f3:10:0c:29:f6:22:30:01:5b:9f:7f:75:43:98:3c:e1:
9e:d1:9b:07:30:0f:8c:f1:37:6c:12:f7:93:f4:8a:e1:79:20:
2b:da:9f:a8:1a:18:fe:84:8f:42:2b:71:1a:7d:59:5f:00:f5:
e3:c2:7e:7f:3e:82:b0:62:90:5e:fb:ae:f5:ab:b6:85:69:a5:
ce:9a:eb:7a:16:4c:a0:37:58:3a:7f:9d:86:6b:b0:2f:7e:9c:
9e:65:05:55:5d:53:8d:28:88:06:9e:dd:35:80:2e:73:f6:25:
3f:64:e6:a3:ea:54:8f:9d:86:9d:df:37:b5:81:b5:81:48:1e:
92:23:ce:5c:ed:72:d9:93:ae:10:21:eb:0e:97:db:7d:e8:a1:
22:59:79:53:60:9b:3f:83:c1:6e:00:c6:6c:61:28:2b:ee:9d:
5a:30:03:1a:53:55:b4:87:0f:e0:38:8c:8d:b8:70:b0:cd:c4:
dc:e7:ef:87:1c:a7:60:44:51:da:e8:67:9f:5f:84:d2:c3:14:
d7:f4:32:9f:d0:8f:d5:5e:31:ac:23:b4:4b:04:f8:5a:42:9c:
8c:a3:dc:35:b4:f3:a6:b9:ae:b9:b2:c7:d3:01:61:5b:45:23:
25:ea:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:40 2025 by rpki-client