Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: tYtFtUMG78VDzoOaZeld7dNQE8VQF/PXi23z/B5js68=
Subject key identifier: A5:3F:BC:7F:12:66:05:29:9A:8A:FC:FC:F1:F7:88:45:89:60:22:0C
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 01989F3A54F99B31A05D4BDDB4D62260A989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 15C7
Signing time: Tue 12 Aug 2025 17:00:56 +0000
Manifest this update: Tue 12 Aug 2025 17:00:56 +0000
Manifest next update: Wed 13 Aug 2025 17:00:56 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: 6VvBg7KjxPEm4q0pnYaRdt3AEjhwSiJxLAyjbnD6fLM=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:54:f9:9b:31:a0:5d:4b:dd:b4:d6:22:60:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Aug 12 17:00:56 2025 GMT
Not After : Aug 13 17:00:56 2025 GMT
Subject: CN=a53fbc7f126605299a8afcfcf1f788458960220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:36:7c:c7:2c:3e:39:ed:22:3f:e1:48:43:
c8:11:86:2e:66:7c:2c:b6:65:da:b6:99:0e:8a:43:
cd:4a:e7:36:8f:2a:48:b2:49:34:20:e4:4c:98:38:
92:45:9a:e5:8e:4d:fa:53:18:98:23:e7:0a:26:f9:
28:9b:bb:9c:c9:18:2f:bd:28:9a:32:ba:95:e7:de:
58:57:49:8d:34:a5:6a:73:d1:7d:a4:6a:04:be:f7:
a5:7a:ec:8e:46:0d:01:80:d0:a8:e8:5f:95:46:79:
be:5c:2d:9c:ef:d7:28:59:7a:e2:b3:ce:26:99:73:
7a:9e:a2:17:f4:05:d6:7e:0c:aa:f5:37:05:f2:0c:
e8:a9:7a:b2:88:6b:46:96:32:5d:9e:0c:0a:4d:67:
8f:6c:9d:cf:30:f3:2d:43:32:8e:7a:86:a4:89:b8:
48:e0:36:ab:40:48:c0:02:ba:99:5e:61:68:bc:05:
18:fa:59:f5:a2:51:b4:22:65:b7:56:e7:87:08:e1:
93:4b:dc:4f:96:96:5f:b5:06:be:5d:fa:49:9d:5d:
9a:15:bb:19:6e:92:34:a9:3d:88:9a:58:23:ee:e4:
a9:a0:99:43:52:a1:61:6e:ac:d5:be:6d:7f:8a:5b:
00:27:a7:be:8f:1d:f0:78:15:9d:5d:ac:24:5e:05:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:BC:7F:12:66:05:29:9A:8A:FC:FC:F1:F7:88:45:89:60:22:0C
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:41:01:50:ef:1d:1d:01:6f:16:35:7f:be:70:9e:d7:0e:
f7:27:0c:1e:dd:f1:c2:b1:7b:21:12:e0:cd:de:32:56:d6:a6:
4e:e9:13:12:3f:5b:24:08:30:cc:bd:e2:a1:83:f8:7d:b1:1d:
3a:fa:d0:a5:04:88:dd:13:ad:45:12:55:9e:e4:1b:2f:b2:7e:
8a:96:96:3f:b9:97:27:97:55:c0:55:d2:d0:96:a5:13:a1:83:
fd:69:da:3c:65:80:61:5d:43:7e:03:87:c2:75:8d:54:e3:f3:
2d:e3:9f:d4:77:60:4a:48:0b:0d:bf:7b:b4:07:76:81:18:50:
8d:62:69:c6:bc:f3:47:a1:14:f8:9f:39:f8:29:2b:10:3e:85:
83:12:a9:31:e0:4f:a8:e8:60:56:b4:08:27:54:cd:22:d8:7b:
4a:12:1d:14:dd:4d:fc:81:6e:a0:16:13:94:20:fc:13:36:25:
ee:2a:92:1e:98:75:ef:87:e4:96:6b:1d:49:39:06:ae:a5:15:
d4:e2:27:08:40:9d:59:7a:37:a1:5b:31:b6:a7:6b:d6:76:73:
e1:18:8c:1f:43:a2:82:a4:6a:0a:da:60:43:43:06:32:cb:e7:
0d:31:3b:f2:dc:1c:17:ec:2d:5d:6c:9c:a9:bb:23:d9:b6:84:
5a:0c:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:52 2025 by rpki-client