
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 5Q4uKSBFH+3P9Gj1ENwig4DLRS3iCduv5US8ZlGpF4Q=
Subject key identifier: 6E:4A:A0:F4:CF:DF:4F:3E:F6:39:C9:D9:57:54:9C:22:72:C9:3A:07
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019879AE8E98EF5FC98FA50691A17C19AA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 15AD
Signing time: Tue 05 Aug 2025 10:02:19 +0000
Manifest this update: Tue 05 Aug 2025 10:02:19 +0000
Manifest next update: Wed 06 Aug 2025 10:02:19 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: +gWczbdEV1+0pzWGZXk/318G0Y8ngs+oTaXlv5xMCL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:8e:98:ef:5f:c9:8f:a5:06:91:a1:7c:19:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Aug 5 10:02:19 2025 GMT
Not After : Aug 6 10:02:19 2025 GMT
Subject: CN=6e4aa0f4cfdf4f3ef639c9d957549c2272c93a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:8e:36:ce:22:cc:24:74:71:c8:13:bc:db:
4d:36:e2:69:01:f8:f2:4d:6e:54:7c:ee:7f:67:0c:
83:08:03:fd:a9:7a:c0:b7:57:98:44:88:c7:3c:27:
67:08:69:1c:ce:6b:39:e4:f5:9d:7a:ba:13:c0:9b:
c3:54:71:ec:53:ff:ba:6c:02:65:5e:d1:d9:7d:44:
14:f9:10:fb:72:6c:71:04:73:72:8e:55:96:a9:61:
60:b1:1c:5c:c1:87:6c:79:da:f2:74:0d:9f:b5:f6:
72:ed:85:c3:6e:0b:38:38:b2:ad:c2:e0:1a:68:24:
98:e9:b0:eb:55:83:eb:92:4b:d7:82:8b:5b:23:a9:
7f:f9:3f:e4:35:dd:2f:65:15:c2:8e:da:9b:8e:e6:
07:d4:32:e1:9f:f0:dd:75:32:68:22:90:7f:84:93:
51:39:f3:96:4e:39:7f:e4:e5:4f:e7:41:7b:40:a6:
73:29:71:24:0b:6d:79:0f:86:ae:64:03:c6:76:26:
67:0b:ef:4b:63:9d:c8:51:9c:da:7f:37:34:2c:65:
a3:f4:7b:36:b4:d4:5c:43:21:2f:41:42:0c:b9:34:
5b:c6:14:99:b1:b5:0e:a0:a5:ee:44:d2:3a:91:a0:
4d:69:4c:4b:b3:89:a2:e9:a8:28:6e:d5:72:b9:5c:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4A:A0:F4:CF:DF:4F:3E:F6:39:C9:D9:57:54:9C:22:72:C9:3A:07
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5c:41:96:af:31:23:d4:ab:1b:3d:dc:dd:7a:6d:df:c1:2e:
e5:5c:e9:3c:55:73:94:00:cc:40:d7:e9:93:97:aa:bc:5b:a8:
26:66:f5:47:19:29:57:64:1d:55:7d:83:91:ab:a3:6b:a0:cf:
a8:8c:f5:33:d6:30:36:49:e5:68:2b:6e:e2:47:70:b4:b1:2f:
94:a2:f0:36:d5:5e:2f:91:86:fe:2e:81:2e:3d:46:f8:3c:95:
e5:a7:2c:91:46:25:29:0e:67:8a:d9:ee:70:d5:d7:79:92:d5:
dc:25:46:b2:31:b5:59:77:e1:bf:9e:bc:83:8f:f8:25:20:d3:
66:5e:ce:67:1e:96:7b:b8:87:f7:31:c8:0f:25:92:df:be:e1:
56:14:73:d6:81:51:91:be:c2:75:93:23:04:02:b8:c5:94:4d:
93:0d:96:df:47:dc:d4:d9:ac:e8:a0:13:56:68:58:e5:bf:6f:
d2:57:d0:36:bf:cf:f5:03:43:20:66:35:9a:80:61:2e:e4:d5:
76:9a:4a:31:37:23:f6:cc:ab:2f:76:fe:4c:54:83:11:24:58:
01:41:fd:93:3b:18:c8:8f:9a:ed:cb:de:c9:0b:5a:2c:0d:e6:
5a:02:2b:09:31:d6:b6:66:0f:c8:d0:1d:1f:fa:5a:1c:86:be:
45:da:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:53 2025 by rpki-client