Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: By2fw75HFzU6r4qkN8DMFBDIEIO1WD9WYXZYCVRuwGs=
Subject key identifier: F3:8A:BB:A1:44:07:82:F3:7B:CB:65:8A:9E:CF:44:22:9D:D4:AA:A0
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 0198D583F060186227459C0BC4DFC9261C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: sOl0skxQEAnG0l2M91c8ptUYt8C7z5p7HgGGguXwYSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f0:60:18:62:27:45:9c:0b:c4:df:c9:26:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=f38abba1440782f37bcb658a9ecf44229dd4aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:72:ab:df:c5:86:94:4d:b9:07:9c:8f:75:
c0:da:d9:d8:c6:3c:59:b8:dc:a1:2e:cd:8c:eb:a0:
39:0c:7e:d1:72:87:54:0c:f2:e5:4e:12:c3:70:ee:
9f:67:a9:67:7a:04:2e:95:eb:a8:e7:84:38:a1:69:
29:e5:2b:d3:9c:2a:11:0b:04:55:58:18:00:46:05:
60:20:fc:04:cf:72:91:db:b5:8e:43:dd:4f:50:f2:
bc:63:15:7f:25:8e:5a:9b:8d:b2:ee:e5:84:b9:b5:
76:df:f4:3b:d4:da:76:31:7e:3c:7a:84:43:8d:5b:
3f:c0:aa:2f:6b:ed:bf:70:ff:9e:43:b4:c6:e6:88:
98:b4:c7:33:57:41:b7:22:5f:d2:3a:ac:65:14:b5:
fd:50:b4:a6:8c:e6:24:ed:a3:ab:54:c6:25:18:67:
32:a9:1b:33:17:bc:1c:4d:aa:19:8a:92:42:01:4b:
a6:c1:56:04:c1:de:b3:35:56:86:11:5b:6f:aa:be:
03:2f:97:d7:51:86:cc:5f:a4:54:fd:04:1b:12:3a:
76:6a:8b:6a:81:28:71:3e:ff:d1:e3:ce:28:cd:3b:
b5:61:96:9b:63:5e:d9:6a:3e:f2:2c:df:53:39:34:
a5:7b:4c:a1:23:4b:94:87:bf:a0:d0:f7:d7:c3:76:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:BB:A1:44:07:82:F3:7B:CB:65:8A:9E:CF:44:22:9D:D4:AA:A0
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:db:7b:52:46:0c:94:ec:32:f6:f7:86:d8:5a:6b:0f:6b:
c4:61:3f:da:2e:41:0f:40:51:f6:a1:68:23:9e:92:b0:e5:88:
cf:40:17:dd:bd:fb:2c:2e:f4:49:ba:e4:a0:b5:a0:30:f7:26:
25:07:aa:0e:e4:fd:f1:68:20:80:62:5e:75:27:cc:2f:0c:af:
29:61:a3:23:d0:06:07:25:64:5b:2e:3d:9d:e4:b1:df:1d:a8:
92:b8:c4:35:fb:c7:6c:8f:67:7a:36:d4:88:c7:b1:e2:97:a4:
5b:96:12:07:8f:74:c0:0c:5a:53:bc:40:03:ab:1e:58:8f:94:
14:b4:a2:d0:af:a7:13:07:23:40:a2:1b:54:57:94:36:60:eb:
25:81:9a:92:a4:e5:71:27:00:9c:cf:a1:69:92:1b:60:c0:47:
af:19:b5:67:e2:8f:6b:2b:29:5d:2d:81:1d:cf:b3:bf:23:45:
af:53:1e:e3:00:18:97:84:02:57:bd:46:40:1a:87:40:52:85:
56:5f:1b:35:05:bd:bf:b0:ec:7e:fe:bf:75:4f:d9:83:cb:a8:
f3:be:66:d1:2c:4e:a8:7d:0a:a0:b7:ab:e8:27:d0:f4:c1:2f:
07:6a:86:ca:8c:d4:9e:47:86:ac:7f:17:74:6a:a4:e7:34:3b:
5a:81:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:49 2025 by rpki-client