Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: XlAUXvnacEcEa0B+y4p7HInQwkwjks9ierS/+mWbTVE=
Subject key identifier: 1F:D7:21:63:26:2A:15:38:9E:E0:F5:08:40:FF:5A:10:43:CC:E3:2D
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0198D4A7FA944FE8ED135B4B770C9F6AF289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 022A
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: 84dXparqZftd3qnjtdzuJbRFMVKU3GyVyus+0eOXqGk=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fa:94:4f:e8:ed:13:5b:4b:77:0c:9f:6a:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=1fd72163262a15389ee0f50840ff5a1043cce32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:c6:63:b2:1f:dc:70:f9:53:ad:db:a8:4a:
a6:7e:89:09:e3:5d:34:a9:b7:f6:4c:a1:ee:79:00:
9a:d6:3a:c7:24:cc:7c:22:b5:06:17:5b:e5:4f:10:
15:ef:a1:68:45:c4:17:4a:63:d7:20:78:5d:0b:a1:
b1:cb:44:b7:3e:43:53:51:03:f7:87:ab:16:a2:cb:
1e:87:0e:15:b5:3d:da:56:57:49:c7:2f:d5:11:7f:
f1:37:12:88:04:e3:78:7f:4f:fa:51:a2:d3:fa:8e:
20:62:5b:bc:a3:bc:fa:9b:19:9a:5d:84:89:dc:e8:
33:bf:d5:53:66:09:8c:25:41:a1:88:fa:f9:58:2b:
60:48:ee:44:a5:b6:17:96:94:3a:0b:93:b5:8c:a5:
ab:52:f4:89:ff:06:3f:7f:c6:ea:5a:3b:9f:99:d9:
65:c8:2d:87:f0:1d:83:fc:39:7b:01:cc:30:b5:c9:
2f:69:a5:f4:20:ef:74:ab:f0:ff:52:f2:d3:6d:08:
62:8c:ca:cb:2b:6c:77:9a:64:9b:b2:b6:69:32:f9:
e4:d5:da:3d:90:a4:ae:52:e0:82:0c:6d:6a:1d:09:
d2:5e:c0:5a:92:34:2c:de:65:6f:1d:a6:5e:17:f4:
37:37:04:6e:5b:35:42:9e:2d:b9:db:ea:05:2c:23:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:21:63:26:2A:15:38:9E:E0:F5:08:40:FF:5A:10:43:CC:E3:2D
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:d0:49:48:d3:73:fc:58:14:06:2e:53:8c:38:82:18:4b:
8f:17:bd:3b:fb:f4:b4:e2:78:ed:d8:c4:71:ef:55:53:5b:eb:
24:8b:43:99:86:07:22:51:e9:0a:f3:b8:ed:aa:5c:05:f9:6a:
e3:18:6a:77:d8:97:c3:70:c2:c2:d9:58:38:39:e8:91:dc:e3:
4d:1f:cb:53:8d:51:5a:20:cc:68:b5:59:66:dc:a2:70:79:23:
31:ee:eb:ad:3d:f6:68:95:e1:0d:10:75:18:c5:3c:86:57:83:
e6:64:85:4b:10:4f:0b:3c:eb:4d:96:1a:b2:45:00:ed:5e:95:
82:af:f6:16:b3:e7:85:2f:d5:21:32:34:e4:69:c2:19:65:57:
e1:4d:1d:34:a1:23:8e:58:22:52:06:65:33:fc:c1:25:d4:cb:
42:49:41:62:cc:8b:54:ee:43:52:98:e5:ec:60:80:5f:09:93:
56:b1:38:bf:f9:5c:3f:91:9a:7c:d4:b6:40:36:fd:b4:b7:e6:
f7:05:e8:33:8c:83:b0:5e:6c:19:8f:12:4c:2e:15:90:88:4b:
69:f4:1f:5e:17:d4:04:ef:04:85:ee:a8:d3:7b:cb:29:bb:e2:
c2:e5:86:a8:0b:49:fa:90:4b:71:f8:d5:5e:72:d3:29:fa:a6:
54:7c:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:27 2025 by rpki-client