
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: xUZHtvzHgNgPqT3MmdX4SKfpWXrXBMWDwAmBeXV8CPI=
Subject key identifier: 4A:B9:2D:67:15:30:88:78:0D:B5:4B:2C:E0:7E:43:F3:13:84:56:58
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 0198808B8787F89BF8A2CAA81945CBC84E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 054B
Signing time: Wed 06 Aug 2025 18:01:24 +0000
Manifest this update: Wed 06 Aug 2025 18:01:24 +0000
Manifest next update: Thu 07 Aug 2025 18:01:24 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: XAX0mN3r+S8+r22+JrKGsQH79LKMTCEPPrqjaEqKU1E=)
2: XdhbDlsmi-wLrPkew-d4TMCD4uQ.roa (hash: GZ7CAjXYNkyYQQ/5CpNjIQ4FPx45ItKMUE3PHSgxPGM=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:87:87:f8:9b:f8:a2:ca:a8:19:45:cb:c8:4e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Aug 6 18:01:24 2025 GMT
Not After : Aug 7 18:01:24 2025 GMT
Subject: CN=4ab92d67153088780db54b2ce07e43f313845658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:69:f5:26:71:7a:63:d3:e5:e6:e5:13:54:
54:5d:dc:a7:ed:c0:43:87:7e:c0:2f:c8:74:3d:a0:
6f:29:14:99:29:ac:af:0d:ce:16:6a:49:1c:66:73:
24:57:20:32:f3:8a:c2:5f:c4:77:fe:c4:ba:e6:33:
ec:14:0e:16:a3:41:23:01:cf:fa:9c:44:31:66:c6:
70:df:90:5f:3e:42:13:6b:a8:ca:6d:f5:cf:3c:0e:
fe:ff:5a:96:2d:65:bb:cb:4d:ee:05:cc:e9:f4:66:
14:1f:a2:c0:fe:05:17:bf:61:f7:95:7b:bb:41:9d:
2c:14:0a:d2:2f:b1:2e:d6:98:f7:07:e0:fe:6f:08:
bc:43:d1:6e:44:27:11:33:31:ff:79:28:6e:db:21:
9f:72:d7:33:05:37:f0:03:53:54:83:4d:8c:26:70:
de:47:2d:fb:93:de:54:5a:c4:35:9d:50:82:f3:a5:
e2:91:ed:b6:c8:d2:3d:96:a2:b2:77:3b:94:f2:84:
0d:bc:59:1f:c1:9e:f4:a5:aa:e9:d0:26:1b:14:06:
cc:e8:29:7e:be:40:96:9b:f3:58:67:1f:bf:f8:1b:
27:ed:e3:cd:55:a8:61:1c:20:29:e2:b9:07:59:1e:
c6:02:6d:e8:60:79:55:87:cc:96:64:0f:28:69:82:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:2D:67:15:30:88:78:0D:B5:4B:2C:E0:7E:43:F3:13:84:56:58
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:73:1b:7f:d1:a5:93:fe:50:0a:3b:4e:81:17:84:75:b5:31:
63:cd:2a:24:93:b0:9a:cf:8d:60:74:a8:86:0c:7a:06:d1:36:
40:e2:17:18:6c:3b:d8:99:fd:15:58:73:47:08:2c:34:f9:35:
42:4c:ec:9c:10:df:67:54:f7:1a:42:46:c7:eb:84:3c:3e:53:
0f:52:18:3e:76:df:89:24:12:cc:cf:4d:cd:93:65:e6:2d:db:
0d:21:9c:bc:dd:71:ac:20:92:5a:76:78:6f:0f:8e:17:d1:41:
b8:b2:4c:c2:24:dd:31:4a:57:2a:c7:5a:1c:0b:cb:0c:f8:6c:
e9:d5:42:3b:ed:a3:ae:0a:e6:ed:38:55:71:12:1d:42:83:48:
49:ea:4a:a4:f9:f8:e9:bd:9a:f9:57:4f:78:1d:93:27:36:bb:
3a:40:f0:06:c0:16:a3:be:1a:eb:6e:14:2c:5d:f7:a3:61:e3:
93:d2:cc:71:b0:d1:5c:bc:8b:0a:1e:4a:38:0d:b1:2c:21:75:
3d:79:0b:e1:7e:2b:21:2d:f5:9d:38:3d:61:d6:93:36:bb:64:
44:60:58:ed:4e:ab:27:17:83:95:da:0f:26:c0:64:c6:65:c4:
1b:30:d1:81:64:3e:a6:cb:6c:12:55:6b:a1:03:1e:ca:1e:90:
9c:fb:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:47 2025 by rpki-client