Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: U+YCizAXc1Q5rLS5AHC+MbsmHo5NUk0DPpyKh274OHQ=
Subject key identifier: 14:A3:2B:21:78:7B:0B:63:C3:B2:77:11:F9:66:3A:F2:F2:DC:80:F6
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 0198A128E0C490BD18A2A26653F64A88CB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 02:01:07 +0000
Manifest this update: Wed 13 Aug 2025 02:01:07 +0000
Manifest next update: Thu 14 Aug 2025 02:01:07 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: NoZnZSJVoKIWFp8BBxtuJuhv+26WJuOC5Df1L8uVRGY=)
2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:e0:c4:90:bd:18:a2:a2:66:53:f6:4a:88:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Aug 13 02:01:07 2025 GMT
Not After : Aug 14 02:01:07 2025 GMT
Subject: CN=14a32b21787b0b63c3b27711f9663af2f2dc80f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:40:81:f9:23:42:6c:54:f0:11:6f:e7:88:
4c:26:a6:c4:ce:8d:ea:8e:23:4a:78:0e:5b:e2:81:
51:40:c1:37:cb:bf:9f:40:b2:c0:86:e3:69:65:87:
a4:2f:50:c5:82:78:3b:89:c1:29:c2:a2:9b:16:aa:
bc:1d:7a:bf:9a:09:b2:b2:8a:6a:de:00:f7:a0:08:
24:3f:2e:02:89:f0:d1:2d:a1:a2:6e:3d:3f:b4:81:
bc:ba:f3:ea:71:a0:68:88:21:cc:84:91:48:9b:f6:
10:6a:d7:fb:be:3c:16:f3:29:1c:bd:f4:b8:ec:e8:
0b:bc:62:c1:13:02:41:8c:7b:84:38:2a:34:28:70:
c0:6b:b2:ab:22:2d:dc:28:fb:7c:93:58:0e:9c:50:
19:2f:14:6f:ff:92:45:12:89:ca:af:2a:a8:e6:0a:
c2:2a:b5:b1:fa:4b:36:42:2b:54:1b:50:cb:bf:1b:
ad:2b:67:52:ef:db:68:03:1b:29:98:a0:49:cf:fc:
e6:85:94:0e:07:59:9e:f7:99:52:2e:e1:1b:7e:57:
42:1e:60:7f:7b:77:54:77:9e:dc:a7:b8:d2:ba:d2:
c6:d1:4b:d2:66:73:1d:44:cb:2c:67:3e:ed:01:d0:
0e:92:4b:d7:0c:d6:fc:e6:75:05:86:c3:95:09:3a:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:2B:21:78:7B:0B:63:C3:B2:77:11:F9:66:3A:F2:F2:DC:80:F6
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:52:1b:24:d2:45:b8:bf:f0:07:61:2f:e4:8b:a3:f3:75:de:
d7:49:64:c1:8f:1a:b3:c5:8e:f3:ec:03:a8:7b:31:26:cb:1e:
6a:c6:43:60:e3:85:f1:60:47:89:f6:24:7b:17:96:89:a2:bc:
73:fa:ad:ca:7a:44:6f:4a:f2:88:67:92:e3:fc:fc:5e:10:71:
2f:85:a8:d1:67:20:fb:2a:27:e6:dd:6c:70:6c:ec:d9:6f:01:
92:0c:d4:a6:e5:b7:51:31:ba:5d:d5:04:48:b5:a0:1c:3d:5f:
0c:af:33:37:6b:76:01:1c:f9:a4:82:47:c5:9d:e1:3a:9d:f1:
80:ac:82:da:c5:c5:60:6a:17:27:47:27:d1:1e:d8:97:ba:d7:
d1:38:0d:14:80:0d:d8:e3:5c:04:52:67:05:77:7e:08:90:e8:
a5:c9:c4:ad:31:a2:45:5c:ed:bc:38:9c:a0:fb:2c:91:70:6a:
46:88:69:04:79:8c:e5:9d:60:a3:e0:63:f5:65:bc:6a:f5:5a:
4c:d1:05:8d:dd:60:81:96:36:62:f8:91:e3:12:94:a3:a8:11:
27:38:af:05:c4:71:e7:91:71:6d:25:ad:32:c4:28:6f:b2:f3:
64:0b:64:ec:ed:5a:df:08:6c:c9:81:18:58:8c:a3:56:7c:97:
60:c3:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:59 2025 by rpki-client