Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: /R7Vhk51u/l0iNe2uBOIjremzOqwM8jRiIF74QQTeBM=
Subject key identifier: 95:5D:F2:B0:32:90:AA:8F:5F:87:70:1A:A0:D5:1E:0C:BE:17:A1:36
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 0198D4A827F0DE17B7991EC513F9F3C11E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 02:00:46 +0000
Manifest this update: Sat 23 Aug 2025 02:00:46 +0000
Manifest next update: Sun 24 Aug 2025 02:00:46 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: BfSIycjHBTPmtxGOL8Mslt9txdswBKBU3ApImavM+F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:27:f0:de:17:b7:99:1e:c5:13:f9:f3:c1:1e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Aug 23 02:00:46 2025 GMT
Not After : Aug 24 02:00:46 2025 GMT
Subject: CN=955df2b03290aa8f5f87701aa0d51e0cbe17a136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1f:42:7e:91:0d:ea:4c:73:89:ec:41:e0:19:
87:a9:63:d4:02:c3:a5:62:b1:60:8e:96:65:17:ac:
76:25:11:78:26:c8:27:78:ea:05:0a:7c:26:0b:8e:
e4:f4:01:16:6f:13:47:fa:83:c9:98:5a:33:6e:e3:
88:ea:ad:fe:98:7f:a5:2e:12:b3:2c:dc:1e:15:d3:
a3:9a:0a:ae:d9:5e:b3:ca:9a:4d:eb:0c:55:02:1e:
b9:22:0d:c8:3f:7c:3a:13:d8:87:51:74:75:13:05:
8c:fd:41:17:76:99:15:0b:c0:7a:27:c4:00:06:c2:
a4:f2:f2:7c:dc:fe:b0:53:cb:3c:50:c1:91:85:a7:
11:d7:a3:65:07:75:31:a2:b8:ae:3e:3f:e1:bb:88:
a1:04:03:9c:76:67:86:98:ef:dd:ac:f9:95:50:ac:
3e:c2:c6:8d:16:9f:8f:78:66:65:48:f4:74:27:1a:
bd:8a:17:94:c0:71:fb:7a:ac:ab:2f:3b:70:2c:c8:
e6:b2:ec:2e:12:e3:94:a1:77:88:c3:1e:7e:17:e8:
d5:1f:f2:f9:a6:8f:bb:06:b8:c4:dc:9a:b6:6e:e5:
f9:b2:2c:f5:e7:bc:be:c0:f9:d2:d7:a5:5d:d9:c5:
7a:37:ff:1b:26:f9:22:85:fd:be:06:18:30:86:ba:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:F2:B0:32:90:AA:8F:5F:87:70:1A:A0:D5:1E:0C:BE:17:A1:36
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:81:99:4c:34:ba:8e:fd:1f:f3:35:72:59:e4:99:24:e3:aa:
ca:93:d5:ba:b2:87:63:8f:87:86:1a:52:9f:63:e3:74:2d:5d:
dd:e3:f3:4d:70:68:25:ea:de:e3:f9:ff:8a:d1:50:0a:7a:45:
35:90:43:f6:9f:c3:ea:18:81:da:a9:65:20:dc:6e:3d:03:27:
a8:59:9f:73:44:80:76:4f:57:07:a9:9b:85:42:a5:69:ee:23:
8d:b3:2b:ae:c8:13:b7:87:2e:25:f9:50:d4:e7:47:43:aa:59:
79:44:35:a0:b5:55:36:e6:52:a5:59:46:e2:54:e1:6b:e0:1d:
a2:67:a2:4e:f8:f4:fb:d0:d9:cb:f1:fc:42:f1:97:38:77:ba:
05:02:ef:15:c8:99:10:de:6a:25:34:5f:bb:82:45:be:8c:9f:
d6:a6:b2:c4:60:e7:e5:cb:e8:f8:1a:07:0c:b9:ae:88:ca:c0:
cd:5a:b1:1c:2a:37:a0:13:c5:ce:a8:4f:c2:40:9e:7e:a4:a5:
a7:1d:68:3e:f0:a3:21:76:f1:f9:75:fe:44:61:07:c1:55:4c:
a0:8e:46:fd:57:8a:5f:50:2c:fd:c0:bf:10:14:40:85:3f:3a:
7b:05:6d:b1:7d:73:e5:ea:b5:c9:4c:39:4e:4e:c5:55:7e:27:
f1:8a:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:26 2025 by rpki-client