Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: pcPkOQFYeE4Uney6SK4Wpg55bn80VniaeKsMEBXbzLk=
Subject key identifier: 83:A7:97:E9:48:28:76:E1:BF:44:E3:DF:CC:49:D2:F4:50:30:BD:F2
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 0198D5BC6318DD4785A26E2C7EDD4D4F78AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: kOpnZZIBPCtUYEY8dqOBVbVSr6p/1SvrbbdjdWUFIFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:63:18:dd:47:85:a2:6e:2c:7e:dd:4d:4f:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=83a797e9482876e1bf44e3dfcc49d2f45030bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:9d:d8:b1:9d:15:f8:0a:0f:0f:1f:5e:90:
c3:0a:ea:70:91:ee:59:dc:86:5f:d5:07:8d:ff:81:
d0:df:a3:6d:db:da:97:28:4f:be:87:81:62:38:9b:
9c:55:47:2f:24:c1:df:c4:17:1b:49:ad:c7:0f:61:
f0:24:c1:44:37:a4:c0:da:5a:2f:55:0d:ed:c9:d6:
36:3f:63:7a:c6:88:cd:ef:93:15:f2:4b:37:a2:06:
31:67:b8:7a:c3:cd:91:2d:ac:42:61:49:73:fd:dd:
bf:07:d9:30:55:a5:19:23:19:7e:a3:ca:c5:fd:dd:
15:87:0c:49:b0:7c:3e:23:52:f7:d0:fe:ee:3f:17:
59:e8:e9:1c:86:31:d9:7a:0e:13:32:5c:06:fe:cc:
96:8d:fc:87:72:85:a2:9f:f2:c1:b0:97:d2:79:5a:
ef:83:01:37:b4:4a:e2:0b:71:6f:10:61:4c:0d:a6:
98:75:02:33:33:95:5f:bb:df:37:b8:8a:c8:60:6f:
a0:02:d7:d7:7c:28:33:6b:cc:bd:11:5c:e6:82:3c:
6b:18:57:71:c6:70:3b:b5:03:fe:d4:05:e7:a7:3c:
a7:0d:19:d6:5a:4c:6d:bc:96:41:21:07:9f:c7:3f:
21:4e:2b:48:f7:69:ee:2b:63:10:88:d7:5f:be:44:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:97:E9:48:28:76:E1:BF:44:E3:DF:CC:49:D2:F4:50:30:BD:F2
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:3e:e2:14:a4:df:26:67:1b:f0:09:dd:01:f8:0f:44:99:
73:46:80:d2:4e:c8:e6:13:33:61:08:fb:bd:bf:59:f2:63:a7:
02:5c:b3:79:6a:90:3b:db:2a:e8:0e:e5:99:be:01:88:5e:24:
a1:90:40:e2:e0:a2:06:94:f1:3a:38:73:dc:f8:a6:bf:85:a9:
61:0c:13:1a:8c:87:18:4a:86:31:8a:66:1c:33:13:aa:da:de:
cd:2f:4c:17:e1:36:0c:95:93:03:39:04:3e:2d:81:9d:bd:bd:
5a:ed:3f:ca:07:30:b9:fb:26:a1:74:c4:6b:c7:6b:c3:31:9c:
b9:4d:fc:7d:fd:b2:75:8b:19:52:17:2d:79:2e:2b:e9:b2:8c:
48:c3:93:49:df:10:da:86:02:7d:64:9d:6b:d1:75:46:80:84:
af:40:e9:7c:5b:e3:fc:57:e3:4d:c2:55:ea:d0:27:02:c5:f7:
c1:f9:b7:75:a8:af:ab:9b:95:1c:c6:eb:5c:87:5c:88:de:b0:
57:df:ef:20:a6:2f:b2:a2:b5:84:1f:44:58:b2:5e:e3:1d:c3:
ca:83:2d:95:b4:e9:0f:dd:55:99:9e:b3:f7:95:00:71:23:23:
93:62:49:be:35:ea:e0:0b:21:cd:08:5c:8b:30:08:23:98:bc:
8e:f4:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:15 2025 by rpki-client