Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: WisE8EdsPM4ORN6M/BQg+AOVC1FERLhWkhXuOjEKBCQ=
Subject key identifier: B9:F5:FF:C3:1F:8B:10:06:6D:38:2B:97:42:DB:DA:98:94:11:8B:5B
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 0198D4E0CA3ED12EB0179A868A73C531E1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 025E
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: 5EEG+AjKcGb+qHm4UUq53/TDDEAROzTBQKDGF0K8QZs=)
2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ca:3e:d1:2e:b0:17:9a:86:8a:73:c5:31:e1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=b9f5ffc31f8b10066d382b9742dbda9894118b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:4f:ad:94:7d:fc:ca:32:24:85:19:49:6d:
95:2f:17:db:4c:e8:3b:78:8a:bf:3c:74:34:c9:65:
94:c8:c5:29:02:5d:ef:cc:1f:eb:9d:37:d2:47:ca:
df:f4:93:dc:2d:ca:2f:a9:1a:1d:4f:d3:97:40:0a:
8d:67:8e:0e:af:b4:3d:10:75:11:08:25:69:96:1c:
1f:5d:be:35:56:e7:51:39:dc:ad:ed:99:74:6c:07:
55:93:d6:6f:e3:a3:53:00:f5:8a:79:88:7b:81:93:
d3:7b:5b:6b:0f:2e:f7:21:23:2a:70:90:7a:62:d7:
6d:36:73:f9:b2:cd:f6:a5:15:42:a1:83:44:ed:63:
fe:3b:3e:43:e0:0c:7d:41:75:14:e8:3b:b2:aa:7a:
51:66:a7:35:f0:19:c0:a7:ca:0b:ef:18:3e:36:72:
51:1a:2c:61:15:37:58:66:6b:cc:74:f9:ef:ea:0d:
66:12:b6:0a:ca:cc:97:0c:a6:9d:8b:74:77:94:b9:
3b:9e:ec:a9:f3:f6:75:01:0e:01:2e:ef:ef:04:46:
af:b7:02:ce:c0:ea:1b:05:fa:f9:d6:6d:d1:9e:5d:
49:46:c3:09:8d:6e:f7:cc:8c:f5:79:7c:81:73:09:
39:c4:bf:11:91:90:c0:02:72:9f:0a:81:df:d8:01:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:FF:C3:1F:8B:10:06:6D:38:2B:97:42:DB:DA:98:94:11:8B:5B
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:42:ec:fa:58:87:b2:c2:64:db:74:0e:fc:e2:79:71:bc:af:
59:a6:24:63:28:b1:0f:59:e7:77:75:52:f3:10:80:14:ab:b3:
60:e7:0b:8a:98:0c:6f:99:19:e2:d1:79:6c:e2:78:60:cb:f2:
95:08:ac:88:57:ad:4f:5b:cf:29:e4:8e:f1:6a:32:29:d4:b5:
86:d9:ac:54:81:57:0b:a3:ed:7d:a2:77:c7:69:0c:15:e1:92:
99:2f:77:d5:69:db:74:2d:51:3c:92:cb:71:b6:d1:b7:9e:11:
f8:9d:18:32:38:0d:81:23:cb:33:eb:d3:e0:b2:09:f7:90:cc:
00:6a:80:b9:d4:6d:e4:f4:8f:3f:9d:87:23:2e:14:20:b7:43:
db:a7:b6:ca:22:6c:82:62:6c:df:d4:1e:7e:5b:48:e2:74:1a:
e1:98:89:1e:69:de:00:f9:9b:95:2f:bb:a1:47:aa:df:69:f6:
e7:5f:5a:19:61:da:0e:e3:c0:01:37:ee:6a:cb:ee:86:97:9b:
8d:99:c0:58:30:bf:1b:4d:8d:a5:b3:5d:4a:72:79:22:e7:3b:
68:86:04:84:73:15:71:3c:d8:e6:df:a6:3d:da:c2:c1:45:2e:
db:87:61:c6:a4:49:b4:4e:27:cc:a5:73:f2:10:a4:56:db:ca:
70:e0:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:59 2025 by rpki-client