Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: w04bS+iSFUAlAzTJjEWV3sDMqpv/Xy/sdKSK7qCr5RI=
Subject key identifier: 7C:A9:3A:D9:F4:48:72:EA:47:45:AD:C7:9F:7B:CC:17:BA:DF:6F:D1
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 019873E3B8C94F2B16D13E99E20F839707B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 0161
Signing time: Mon 04 Aug 2025 07:02:40 +0000
Manifest this update: Mon 04 Aug 2025 07:02:40 +0000
Manifest next update: Tue 05 Aug 2025 07:02:40 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: lNhYYj46KR5+R98nuBxi/AektjJR6cycxxfdGi78UJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:b8:c9:4f:2b:16:d1:3e:99:e2:0f:83:97:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Aug 4 07:02:40 2025 GMT
Not After : Aug 5 07:02:40 2025 GMT
Subject: CN=7ca93ad9f44872ea4745adc79f7bcc17badf6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:28:83:79:8c:29:b6:cc:54:ac:f6:33:aa:
07:c4:90:31:2d:fa:8b:5f:6d:7a:3c:f5:95:b2:ef:
e0:97:e2:73:72:18:55:4f:1d:f6:5f:da:86:25:46:
61:9c:54:72:13:0a:11:67:52:30:94:07:96:66:e2:
52:8f:33:ec:05:26:01:8e:2e:7e:94:6d:d0:7f:a1:
99:34:83:47:04:02:85:f0:65:12:4e:60:67:8a:38:
fb:81:ab:e1:1c:fc:ca:51:1b:aa:60:6b:7c:75:8e:
a5:d5:6e:a7:dc:e7:92:13:f6:32:25:0b:79:52:d5:
c3:12:99:40:07:02:8a:77:d5:12:17:cf:c0:63:8c:
bf:cb:84:ed:56:0b:7a:05:51:21:2b:0a:00:21:08:
41:67:a8:14:1d:0b:df:49:81:16:80:d6:7d:30:a7:
fb:78:c9:e5:da:ce:3b:27:1e:1f:6a:0b:78:e8:f7:
c6:d4:df:18:cd:fc:13:61:d3:7c:93:67:65:90:11:
e5:11:20:76:4e:da:63:e3:91:07:bc:fd:65:7d:7c:
8e:be:75:24:e4:67:88:93:29:1f:60:f3:ac:1e:92:
5a:c1:41:74:f3:74:6d:4a:43:3b:e2:d3:09:2f:9c:
2f:10:e5:2e:05:1c:5f:1c:89:d1:d6:8b:b4:8f:c5:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:3A:D9:F4:48:72:EA:47:45:AD:C7:9F:7B:CC:17:BA:DF:6F:D1
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f0:02:81:89:3a:62:fe:f4:e8:1d:e2:d1:fc:c1:fb:2d:e4:
42:c9:fe:42:a6:cc:85:2c:0c:90:d9:82:83:0f:ec:b2:8b:7f:
7d:50:7e:95:8c:f8:fa:c4:85:f3:8f:9c:22:7a:2b:a0:e3:8a:
a0:42:4d:99:17:9e:37:fb:8b:65:ca:70:9c:c9:e4:0a:85:21:
ba:61:67:b0:ee:51:98:2a:92:8c:c0:04:d6:9e:3d:fc:12:b7:
22:e8:3e:35:3b:65:ca:12:57:a3:ab:61:5d:95:ea:74:c9:19:
2f:d1:46:a4:81:00:69:39:cf:61:65:c4:96:f2:44:60:d8:ed:
e3:1b:c3:5e:dd:a0:c3:3d:3c:06:c7:d6:9b:11:15:e3:a1:ea:
01:b9:03:f7:ab:4b:12:eb:47:3c:21:5b:f3:ee:75:28:63:c1:
b7:1b:74:cb:21:32:d0:f3:86:40:3e:fe:82:67:2f:34:69:ce:
54:26:c6:f5:42:5a:2c:2d:3e:4a:b7:7f:8b:c2:31:2e:e4:74:
68:79:84:59:d9:0c:02:62:6e:99:9f:8e:8a:a6:27:78:11:af:
10:9c:99:fd:22:2e:4c:5e:11:ef:5b:4c:c5:1c:15:55:a2:bb:
a2:67:d5:a0:5e:b1:e7:e3:f2:10:96:e5:ac:d6:44:a2:dc:9a:
ee:36:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:09 2025 by rpki-client