Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: K4cjeU+y5prjRK1kjvQgmg41mvIc48PY98vruJtERks=
Subject key identifier: 21:19:8B:6D:A7:B7:51:15:D8:40:BE:EA:71:1D:D0:2C:F1:DD:4E:43
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 01987CAEA66DB6E2CBDC7AA19A67F19409D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1214
Signing time: Wed 06 Aug 2025 00:01:17 +0000
Manifest this update: Wed 06 Aug 2025 00:01:17 +0000
Manifest next update: Thu 07 Aug 2025 00:01:17 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: 6w5NyJBa7fTa8wIlUm+8MYULzvXv0XeLFFPpfwFtj+w=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:a6:6d:b6:e2:cb:dc:7a:a1:9a:67:f1:94:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Aug 6 00:01:17 2025 GMT
Not After : Aug 7 00:01:17 2025 GMT
Subject: CN=21198b6da7b75115d840beea711dd02cf1dd4e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:cc:23:ad:90:bd:ff:f0:3f:a0:19:5e:56:
f8:1c:06:0e:9b:6e:7b:6c:ff:34:ab:10:8f:1a:f7:
4f:34:10:a3:82:07:44:bc:92:0d:59:1b:23:c6:30:
2c:aa:5a:6f:32:63:6e:34:f6:dc:6e:be:01:39:6b:
92:bf:4f:17:de:a0:df:5d:c4:b0:e8:af:76:d8:65:
bb:19:21:71:01:c8:42:b8:a5:21:5a:64:2f:42:6b:
b0:6e:8e:9e:4a:fe:66:14:32:34:08:f6:71:a8:7e:
a2:44:c2:71:bc:93:2e:67:42:bb:1c:b5:67:fa:20:
b7:a8:e9:0d:df:03:d6:91:90:07:87:a9:b0:45:58:
a1:3f:ba:d2:59:01:8d:16:46:f2:5e:27:a8:6a:40:
cc:7b:c2:43:81:27:4a:6c:41:89:d1:c0:79:00:54:
ed:6d:17:76:17:9c:e7:aa:c5:06:1a:7a:40:ca:35:
bc:e3:8c:d0:59:d2:83:b2:c4:7c:bb:58:43:f0:eb:
ec:31:f3:43:ad:41:63:a5:dc:b8:d6:a7:47:d3:56:
dc:e7:50:8f:0d:94:28:b0:1f:b0:5e:35:94:ba:bf:
38:a0:b2:d7:42:3d:29:05:14:69:94:59:a9:71:46:
14:29:66:82:0f:11:04:43:46:f6:3d:a2:cc:a9:7a:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:8B:6D:A7:B7:51:15:D8:40:BE:EA:71:1D:D0:2C:F1:DD:4E:43
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c8:fd:37:35:d2:ef:f1:bf:7d:b4:60:9b:87:ed:2c:8b:10:
88:34:b4:14:fb:c6:f7:04:df:aa:01:66:21:ac:71:cf:2b:b8:
6e:00:2a:fb:28:13:42:d2:cc:32:f9:87:33:61:02:83:3c:49:
1f:9d:a6:77:30:4a:24:af:fc:e3:16:fe:7b:3d:7a:5f:fb:b9:
92:85:98:98:76:dd:08:ef:59:a8:f2:13:be:af:55:0d:d0:c8:
18:03:7e:cd:c3:5c:67:97:b2:38:3e:f9:7a:20:c4:cb:68:39:
df:aa:f5:2d:1e:c7:3c:07:db:83:f5:83:75:30:68:bb:6a:0a:
6e:46:44:e2:e5:8d:8a:d7:f5:98:7f:5a:f2:c5:bb:c6:e5:e1:
7b:19:51:c2:f5:f8:e4:7c:df:68:9d:af:e4:64:69:26:2d:39:
bd:8a:64:55:29:b9:77:e0:b9:e7:e5:40:17:fa:ad:ca:b4:2b:
64:5b:4f:25:f6:2c:1e:3a:f7:f4:36:72:55:65:2e:62:19:f3:
db:de:d8:3c:22:5e:f8:df:4b:55:3d:f8:4d:ae:aa:c2:77:70:
09:fe:99:47:4f:86:92:4a:35:b6:b4:cc:1d:e2:c4:bd:69:a9:
2e:58:a8:10:a3:da:33:08:ed:b0:f6:99:4b:06:58:ed:db:a1:
4f:85:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:28 2025 by rpki-client