
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: YhUcHGe+jhSQzgN3lbpului//SAYHb42YxpcfG1I3Rg=
Subject key identifier: 69:F4:8C:F8:86:10:CC:52:7F:00:E5:99:B2:D3:AA:E9:52:CD:45:58
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 0198D698951A0F0EF45D1A138CBB1D26418E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 0194
Signing time: Sat 23 Aug 2025 11:03:00 +0000
Manifest this update: Sat 23 Aug 2025 11:03:00 +0000
Manifest next update: Sun 24 Aug 2025 11:03:00 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: 11Kc27YbolknPy0h6h/4jibKSI2W89WgIpkJEB0laZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:95:1a:0f:0e:f4:5d:1a:13:8c:bb:1d:26:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: Aug 23 11:03:00 2025 GMT
Not After : Aug 24 11:03:00 2025 GMT
Subject: CN=69f48cf88610cc527f00e599b2d3aae952cd4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:72:6b:7b:22:04:da:51:cf:54:8a:04:ae:
a0:31:8d:19:90:b4:0c:e6:4c:b6:3b:81:fc:94:36:
67:48:23:6d:61:6e:db:09:8a:9b:c9:2f:83:cc:90:
ed:b6:58:bc:78:74:54:65:74:26:4f:34:52:71:98:
a1:a4:60:48:ca:48:e5:24:8b:38:db:ed:25:c1:c2:
51:af:13:99:b0:cc:c4:34:95:40:fa:49:95:8f:5d:
7d:ee:ff:41:64:51:81:3a:de:fc:08:50:2e:c0:9d:
7c:41:7f:a7:4d:ae:44:ad:6b:30:6a:21:94:ef:a8:
f9:41:ee:b4:f1:22:df:b9:c9:d0:d1:43:83:ad:d8:
16:8b:e6:31:f2:6d:3f:6e:d6:28:cb:e9:83:af:ef:
8e:c1:1f:b2:08:ae:93:d4:4f:46:20:77:ab:d3:d6:
23:fb:4f:9f:34:dc:16:83:30:75:8d:1a:19:f8:61:
d4:4c:3b:12:0f:3c:af:4f:e4:0f:cb:f9:77:f0:02:
50:67:98:ca:51:13:61:4a:f9:44:ff:16:71:ea:9f:
0b:b4:91:96:c3:15:53:e2:2f:b1:7d:d0:cb:7e:12:
f1:bd:42:fb:cd:3c:e2:a2:3a:38:80:83:04:38:d5:
1f:9d:1d:da:1e:e9:ee:6b:35:2f:14:70:41:74:4a:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F4:8C:F8:86:10:CC:52:7F:00:E5:99:B2:D3:AA:E9:52:CD:45:58
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:93:0e:b3:4c:85:4c:15:d7:10:86:a1:ea:89:d6:e9:c4:14:
19:c9:81:e2:10:b0:6a:c1:4c:02:ca:ba:9e:8c:cb:10:58:dd:
57:cc:09:47:2e:aa:47:dc:6d:4b:90:5e:c7:80:77:57:78:44:
5c:46:c2:2c:20:38:65:8a:e2:b8:73:cf:9a:d9:e8:cf:ed:4a:
5e:6f:a0:e9:98:78:63:e5:9f:16:12:d8:9e:49:ec:fa:3a:7a:
ff:5e:bc:d9:d0:0e:c2:fa:0e:fe:96:a5:e4:d9:48:78:d6:60:
d0:01:27:d9:37:a1:ad:90:e0:eb:f7:ac:ee:e6:e4:6e:22:85:
47:6e:0b:e2:2f:a0:10:32:23:b7:24:4a:97:50:cb:94:29:23:
e8:b3:42:2b:ff:e6:e7:d7:d1:56:34:b1:00:60:79:1d:03:dd:
38:17:9a:d6:ba:51:ed:1e:f0:29:7b:91:2b:2e:eb:7f:95:f5:
3f:86:db:b4:fb:58:82:e4:f6:a3:e9:9e:c2:b2:f5:d6:e2:05:
ef:b5:d9:c2:d8:48:fe:8c:78:06:76:97:c1:b9:05:48:bc:8d:
73:c2:46:39:c0:c8:72:ee:ca:3e:e3:d0:ca:d4:dc:9c:0a:24:
56:f5:77:3c:16:0e:9e:92:60:87:74:a9:01:45:20:61:51:f9:
51:3f:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:01 2025 by rpki-client