Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: QikR0x8p4Se13ZMdHs4MSqD+heqDCfzKzE/ZYgRGIvM=
Subject key identifier: 6F:D7:B6:65:53:F6:EE:32:30:24:53:D9:63:C8:64:10:91:30:C3:55
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0198887B91C1BEBD6B3F916FEC1AE062BB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0DF0
Signing time: Fri 08 Aug 2025 07:00:56 +0000
Manifest this update: Fri 08 Aug 2025 07:00:56 +0000
Manifest next update: Sat 09 Aug 2025 07:00:56 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: iWK/j8LmcuXCX4QOxapjr/3aX69pHHG4p5XCA3QTW8I=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:91:c1:be:bd:6b:3f:91:6f:ec:1a:e0:62:bb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Aug 8 07:00:56 2025 GMT
Not After : Aug 9 07:00:56 2025 GMT
Subject: CN=6fd7b66553f6ee32302453d963c864109130c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:35:11:ba:c5:48:d7:f9:4d:b6:b2:14:eb:
32:08:2a:66:c2:60:15:6c:33:f9:0c:0d:59:06:03:
f5:0d:41:06:ec:49:84:f7:35:f2:57:93:b1:86:61:
dc:8a:2a:1d:74:75:b8:de:9b:07:c7:59:40:33:dc:
10:94:c8:63:ac:70:34:78:b5:e4:5e:7b:fc:08:ce:
b9:d8:59:fd:fa:8e:1f:3e:a5:fe:79:2f:8e:ff:6e:
2e:70:d6:49:1e:b2:5a:2f:61:32:18:c8:e7:0b:d8:
0d:b3:e4:04:bd:9c:4d:f3:a5:f6:60:14:e2:82:66:
81:90:84:ef:f8:78:d6:e3:1b:42:90:67:f9:35:49:
d1:2d:e7:09:71:46:b1:3a:9f:0c:f3:3a:1c:a3:cd:
da:b8:db:a7:39:f6:c1:06:f1:30:8f:9b:6c:21:45:
a4:87:78:f2:4a:a8:9f:b2:ed:28:da:e4:c8:d4:02:
48:8d:32:5d:b7:c2:9a:f7:09:4b:ac:76:15:c7:2a:
2c:e7:33:4a:6c:92:f5:8e:1d:89:1c:c3:b8:38:3e:
89:de:da:69:15:7a:8b:1b:4c:18:7c:ad:0d:91:31:
97:de:79:d0:f4:aa:66:bf:b6:ea:78:b5:00:76:65:
fb:1e:1d:59:3c:4b:3d:0f:2c:e9:b2:ba:74:db:0c:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:B6:65:53:F6:EE:32:30:24:53:D9:63:C8:64:10:91:30:C3:55
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:42:aa:21:6b:6f:52:8f:4d:f7:a7:ca:79:a8:93:f3:29:
68:3d:4f:d1:0b:0c:ed:7d:43:38:73:4a:28:33:7b:f9:d9:97:
45:ee:2e:fa:9c:ea:f0:ef:4b:cd:a5:ff:28:cf:f7:a3:1b:23:
af:38:fa:ad:46:de:d7:f7:cb:b4:f1:29:d0:73:44:24:4c:61:
7d:fe:df:80:cc:d9:d3:7c:4e:24:74:77:49:4b:2b:ff:1b:9b:
24:ad:f7:e7:18:41:37:33:25:25:9f:73:6f:e6:82:df:61:f5:
00:6e:02:e5:6e:37:d9:87:9a:09:4c:84:3d:6b:47:27:df:dc:
f5:ec:08:e4:7b:97:77:2b:31:e6:7e:1a:37:c0:89:c1:e5:8d:
30:0b:bc:55:e6:11:e9:b0:dd:4c:c6:78:4e:35:7f:7b:de:7f:
3a:13:07:12:24:f9:2c:b3:fe:70:0d:b2:ae:d5:68:72:bc:75:
fd:b0:4f:54:9c:58:1b:83:40:3e:8d:7e:2e:5d:1e:1f:3d:52:
6a:d7:c5:44:0e:dd:02:08:a2:db:73:e8:68:a6:df:3b:57:8e:
39:a2:41:ad:22:69:02:32:fb:92:91:13:be:8e:1a:68:13:8a:
4b:a5:37:35:8e:38:b4:3e:77:4d:8b:e6:82:aa:79:f1:35:a6:
46:24:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:06 2025 by rpki-client