Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: p/XfU+YuhEFQ8lcalW5c70uED/yMX40BZPjbQm7cSkM=
Subject key identifier: 94:CD:C1:41:24:72:98:A8:47:71:11:10:54:DB:03:62:9F:7B:85:53
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 0198D5F138239A6EB164BB6F65ACD6755071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: dgMxDhET4d5D/x9vgD/jZWhMQQt2XudwCwFSM/BuxsM=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:38:23:9a:6e:b1:64:bb:6f:65:ac:d6:75:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=94cdc141247298a84771111054db03629f7b8553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:73:6e:ca:e0:e3:12:6d:f5:a7:4a:23:fb:
4b:40:34:a6:4d:83:e8:c7:c7:e6:f5:40:b6:5c:4c:
eb:e4:24:ba:7d:20:76:d0:85:7f:57:5d:49:3e:0e:
19:ca:4d:86:0f:d5:c9:7e:18:bd:48:9a:51:67:2d:
7b:34:50:d0:01:9c:e4:11:6b:2e:17:fc:da:07:07:
f5:d7:14:a0:f8:81:ab:6a:36:24:20:34:f5:0c:95:
3e:9a:89:2a:45:f4:43:b4:9d:bc:bd:3d:d0:69:ba:
1a:e0:cc:81:d3:75:9e:ed:cb:55:2c:49:56:ad:d4:
dd:85:57:0e:d7:76:b3:2c:c2:68:28:75:a2:a6:94:
23:cd:27:27:2f:9f:3c:c4:4b:65:44:42:b7:a6:87:
14:a1:aa:63:53:f3:09:8d:d8:3f:0a:15:02:c3:46:
ec:27:e7:2f:4d:e9:9b:c7:90:fd:42:58:7f:f8:da:
f9:eb:5c:37:d6:87:eb:f6:d1:80:3b:72:0e:08:4f:
65:f1:8b:cc:cc:a2:76:20:a3:bf:ad:26:c0:66:55:
51:f1:f0:9c:87:9e:d1:ab:c5:18:48:3f:a7:0c:38:
17:79:71:56:3f:00:08:61:ec:dd:4b:9b:81:1f:30:
b3:a7:b1:19:e5:62:9e:bf:f7:fe:c1:f8:94:44:5b:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:C1:41:24:72:98:A8:47:71:11:10:54:DB:03:62:9F:7B:85:53
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9a:da:ea:f6:ce:88:82:5e:e8:d5:c5:a6:6d:29:56:85:1f:
af:b2:54:df:42:34:a2:81:00:f8:76:db:53:ac:0c:1c:09:1f:
8e:8e:56:64:c8:57:ea:ac:62:86:8a:10:64:88:58:17:53:4b:
9e:eb:dc:47:fc:a5:df:20:65:bb:a8:00:85:ac:59:1e:e4:36:
3e:73:1b:de:f5:ec:0b:86:83:e6:9a:fc:28:23:2b:d9:54:07:
73:93:ee:12:91:8b:b9:fe:3c:c5:21:4f:61:93:47:b1:48:64:
fd:83:a2:f2:09:15:25:f1:41:55:8d:9d:d0:6f:2c:3e:0d:60:
db:00:45:16:4e:1b:91:43:85:3d:28:f8:61:2e:f0:1d:6b:08:
4c:36:1b:dc:6a:b2:12:27:f1:d7:32:3e:9a:4d:ae:26:35:98:
73:7d:1c:77:ae:11:0c:ab:56:40:58:f5:1d:d8:bc:f0:ca:c7:
e3:95:d3:2b:11:a1:bb:1c:58:ea:85:d2:30:65:37:6e:f1:44:
cf:ab:8c:2e:cf:c7:bb:09:13:f7:81:c4:fb:f1:55:36:51:2b:
e0:1e:cb:2a:7a:b3:34:67:75:5e:e9:64:08:e3:fd:ee:77:8b:
81:de:61:a2:d3:55:3d:7b:ea:5d:aa:7b:3e:a2:e4:f3:44:f6:
3b:be:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:54 2025 by rpki-client