Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: hc4MCUwHzRUo54mxx072bhTYvnAVrukcAHybMTtYSL8=
Subject key identifier: C6:B7:38:C9:64:64:FF:E6:2C:85:97:A1:21:5C:37:09:CF:34:10:F0
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0198D5BBD0DF7195B6F43DCB70BA0302C291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: VPkgvzUusAZShKPg036tQiLnoofojI/0v9O/fJEM6NI=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d0:df:71:95:b6:f4:3d:cb:70:ba:03:02:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=c6b738c96464ffe62c8597a1215c3709cf3410f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:67:be:a9:f2:70:7f:00:aa:7d:4e:09:e7:
45:cf:c9:ce:61:42:8f:78:02:3f:e6:aa:a1:e3:a1:
a2:24:5e:82:cf:2c:d0:ed:6d:6d:21:1d:87:63:98:
72:1c:03:72:64:2a:59:90:3e:79:32:cd:be:94:65:
0e:a5:ce:f1:eb:d6:53:be:73:14:9e:52:79:1e:34:
44:1e:9c:dc:43:c8:40:67:d9:e8:8a:ce:58:37:ea:
76:d3:54:5e:53:44:c4:44:f0:7f:80:07:16:7c:af:
64:33:75:3c:78:55:80:9a:8a:c5:ba:4f:0e:39:56:
bc:66:bc:df:e0:1a:f3:ab:c0:93:2a:d5:a6:1e:b7:
35:7e:6f:bd:1c:4b:5f:e7:ea:c5:81:6d:07:68:d1:
d4:4f:1e:fe:8a:92:31:97:a8:37:29:a1:96:a9:aa:
fc:25:bc:d3:8b:11:43:9a:40:3a:e3:28:e7:0d:c8:
6b:b4:26:7e:71:a5:b1:a1:2d:b7:da:b3:e5:c5:52:
29:53:82:ed:c6:dc:66:12:d0:7f:82:50:f8:f0:00:
d5:76:87:cc:88:2c:56:bb:cf:aa:89:07:58:f8:37:
fd:24:8d:e5:7a:43:3c:35:a9:0c:57:39:8d:95:5b:
0b:cb:24:8d:c2:ad:e4:9e:e2:b3:6c:c2:06:61:fb:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:38:C9:64:64:FF:E6:2C:85:97:A1:21:5C:37:09:CF:34:10:F0
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d1:19:9a:d7:1a:9f:d1:3f:24:e8:9d:c4:fe:79:50:f7:79:
04:51:15:0b:48:54:46:0b:0f:2c:83:2a:d9:6b:e9:8e:e4:96:
70:5f:04:15:34:23:2c:c7:27:06:5b:e8:46:c2:2e:84:5d:c7:
58:35:89:fc:ba:5d:16:75:2a:f0:de:fb:09:be:df:74:1a:06:
93:e0:e2:18:b2:b0:b7:36:ae:08:5f:0d:7b:14:cd:83:cb:21:
27:20:c4:ad:7a:32:ec:60:04:79:97:15:6b:8f:dc:a7:7d:a3:
fc:6c:8b:73:4d:d5:85:28:32:f9:e7:50:35:82:39:7a:ea:62:
77:ff:e9:6f:4d:fd:39:2b:f0:2c:29:53:05:08:02:af:29:b9:
2c:85:dd:e1:8d:15:ca:d6:05:90:75:15:83:46:80:2b:16:ed:
b4:a4:0e:73:70:d1:0d:3b:cb:8c:5f:ef:fb:59:7b:65:8e:1c:
31:4d:83:71:38:e9:87:e9:99:83:ed:6c:64:69:2d:2d:90:4b:
ff:a9:91:5b:86:78:e6:23:7a:29:96:2a:21:6c:f6:36:b3:4b:
1b:b3:42:ea:2a:ee:be:c8:fc:de:09:8d:5d:27:86:f3:3a:7e:
53:b7:68:31:09:ca:40:b6:f0:3a:c4:ec:25:e9:72:e6:a3:86:
4a:01:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:17 2025 by rpki-client