Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: IX0GzyZ3jBKLdISpV5+6/BAaiKyOOyS4kSe/G+De7Bg=
Subject key identifier: 55:C4:07:C9:8F:41:5A:2B:AC:D7:FB:94:C7:8F:44:07:01:86:BD:00
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0198D6603D83FAFB73DD6278E976FB2782F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 025D
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: olxablNEAWUMhpV0wZDi/qiiHjYuUhTHm6HBJMsbrxc=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3d:83:fa:fb:73:dd:62:78:e9:76:fb:27:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=55c407c98f415a2bacd7fb94c78f44070186bd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:ab:e0:a2:6f:50:e4:04:66:60:7c:b9:c8:
92:60:e2:7a:6e:61:54:68:df:84:59:35:cb:12:eb:
d1:3c:7a:73:0c:d7:3e:56:c8:23:2c:03:71:b7:d6:
ea:2f:a3:be:76:06:11:50:1d:4a:2f:6c:f2:0e:56:
3e:f8:f3:85:45:01:04:5a:a2:e0:cc:a5:55:35:3e:
b9:9c:44:b3:bf:be:a9:8c:c6:d6:de:6a:a0:09:05:
29:3b:2d:13:af:b3:84:f2:d2:bb:59:69:03:ea:5a:
af:1f:04:76:8f:6a:5c:d3:bb:83:b0:1b:23:8d:ba:
91:e0:05:5f:09:3b:4f:ea:e3:7d:67:39:9f:97:37:
4b:d6:a0:4e:33:f4:77:c2:0e:c2:aa:a9:ee:fb:14:
5e:cc:e5:0f:c6:cd:d1:b4:22:3f:98:56:ce:56:ea:
60:2d:34:de:f1:90:06:d7:a5:b4:a9:e2:2f:72:a3:
14:74:ee:3e:b5:3a:fa:fa:10:55:bb:38:6c:6e:42:
3f:de:b1:c1:7b:4c:d9:31:fe:a9:f9:65:e4:8c:a2:
f3:da:a7:1e:a0:0a:76:78:de:f4:b4:30:8e:77:50:
91:9d:fa:f3:bf:f3:2e:a9:d9:79:8b:15:e5:93:db:
bc:ba:53:93:cc:31:ed:7c:a9:29:f7:2d:be:73:83:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C4:07:C9:8F:41:5A:2B:AC:D7:FB:94:C7:8F:44:07:01:86:BD:00
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:1a:ac:61:c0:63:51:23:c4:00:18:93:4b:cf:a7:9c:34:
f6:21:db:42:81:b8:09:ad:4c:c4:c4:e7:f6:29:c3:19:0a:21:
a9:71:a9:ef:69:c4:fd:c1:f3:61:0f:f7:dc:2c:79:e4:40:8a:
b0:82:6f:24:cd:3b:06:f5:71:b5:cf:1c:67:26:cb:c6:fe:8e:
a8:e3:cf:39:65:ae:fb:de:0b:1b:d6:5f:93:a0:bd:59:82:3b:
d3:a5:1e:fb:0c:95:76:9c:5e:41:df:61:ae:74:0e:ea:49:cb:
d7:4c:1e:02:37:fb:a5:5c:9f:9e:43:1a:91:4c:0f:7d:a4:6c:
f4:41:9c:a8:a6:40:70:4d:cc:9b:72:f5:0c:46:25:be:ff:b0:
8f:40:a0:92:87:51:b3:18:e0:57:f5:6c:bf:6e:ec:72:2f:19:
1c:fc:7a:5b:b9:21:39:d0:17:59:22:12:44:63:db:5a:75:db:
b7:38:72:f4:f9:2b:4b:0d:2d:0b:de:4d:ba:e8:b7:85:2c:f3:
a0:17:0d:09:e1:6a:1a:af:9a:88:a7:04:48:a6:0a:d8:d3:1f:
c1:fc:ea:18:21:97:95:86:9b:04:ae:d3:53:76:30:37:5b:3f:
c7:cb:3c:82:83:ef:38:09:8c:07:2a:da:7e:e7:e4:14:d5:77:
fe:bb:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:48 2025 by rpki-client