Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: TTnR+/Af1cFoGYnMRYWaRC3G5Er9/UHJs43TWwY5sqA=
Subject key identifier: 8C:B6:A5:F9:DE:DA:0E:91:43:2B:BC:AB:66:95:09:56:07:24:21:83
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 0198A04D3C8E61D3CD86C0398C69923481E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 04B3
Signing time: Tue 12 Aug 2025 22:01:12 +0000
Manifest this update: Tue 12 Aug 2025 22:01:12 +0000
Manifest next update: Wed 13 Aug 2025 22:01:12 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: CrfgBINw/QwONjcKqH0ZN81bnM9QXk8x8AGJIGg18Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:3c:8e:61:d3:cd:86:c0:39:8c:69:92:34:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Aug 12 22:01:12 2025 GMT
Not After : Aug 13 22:01:12 2025 GMT
Subject: CN=8cb6a5f9deda0e91432bbcab6695095607242183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:02:e4:f2:b0:80:24:6a:14:56:fb:dc:39:
62:a9:fd:25:c0:7c:4f:30:48:a0:9b:03:09:70:83:
5e:b2:96:dd:91:3a:4e:1e:e8:9a:27:3f:c3:de:43:
48:c9:60:b5:41:6f:f3:14:87:35:56:14:38:ba:4f:
58:ec:74:36:b1:c5:33:33:a0:d5:c8:83:7b:a4:7a:
a8:f3:87:46:0d:5e:93:97:11:37:39:69:ac:80:1a:
7d:c8:41:f1:df:03:bd:a4:dc:a7:96:fa:4e:19:d2:
13:8c:30:00:6f:52:3e:ce:ae:c7:19:64:2b:07:68:
ae:24:4c:87:75:e1:61:71:7d:83:86:ec:16:19:a5:
b1:c7:c5:08:3f:2b:bc:15:62:36:42:2c:4e:bb:fc:
ea:23:d9:95:45:1d:bc:7e:f0:50:7a:19:0b:6c:bc:
f9:40:59:8b:33:b1:72:3f:c5:cf:fe:56:0d:06:ba:
25:93:ed:ef:90:d2:54:ce:7e:e7:e3:1a:41:2d:08:
f3:31:40:4a:0f:c4:ef:43:0a:26:cf:9d:5b:43:25:
03:7e:5e:66:4b:29:f9:8e:09:19:4c:54:f7:62:24:
da:6a:63:e2:71:17:4a:24:19:4a:61:62:26:df:00:
be:16:9d:9d:b3:44:8e:9a:99:35:db:15:48:6e:cb:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:A5:F9:DE:DA:0E:91:43:2B:BC:AB:66:95:09:56:07:24:21:83
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:e2:5e:02:22:46:36:19:d0:9e:1c:2c:e6:fb:76:96:08:
d4:0b:d3:ec:87:7c:89:76:85:58:09:e8:08:39:f7:a2:f1:a5:
73:01:83:d9:e5:ac:8b:6e:dc:65:e4:76:3e:08:2e:b0:5e:80:
50:e2:c1:2f:99:6e:95:ab:93:8c:88:60:26:8a:38:e0:56:09:
fe:4e:6f:b4:1d:a2:ff:26:19:60:fe:91:2f:51:73:66:24:b1:
d6:4d:58:38:59:fa:09:83:8b:27:4e:2c:2e:60:0c:f1:1b:52:
cb:17:18:20:a6:d2:e3:63:a3:80:eb:4c:a9:fe:4b:51:98:f1:
41:a0:10:63:a2:22:6a:8e:0b:42:d9:46:6e:ef:6c:75:d9:15:
aa:3f:d7:90:21:a9:38:5a:bb:7e:a3:ce:72:43:a1:2a:8e:52:
f1:45:42:a2:86:3c:86:2e:04:b0:74:20:8a:73:43:97:46:ec:
7f:e7:60:9a:67:71:dc:83:ad:9d:3c:5e:b1:27:09:0d:03:dd:
da:3c:5f:72:ca:41:94:81:88:4f:aa:05:ad:97:e0:77:3a:ef:
ca:33:f5:f1:97:ad:3a:a3:f2:93:09:54:f7:ef:ba:0c:1f:ab:
2f:62:d3:76:6e:58:25:4b:bd:9e:04:f8:63:ed:99:3a:62:a5:
c0:62:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:37 2025 by rpki-client