Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: 6XgKQzPdsLTYi+zCKK5CiaG56fVgc/XiyPdrqhIzCf8=
Subject key identifier: 09:B0:A1:15:D3:85:5F:C5:82:32:F5:22:69:57:95:B9:47:E7:B2:46
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 019896372A91AB06D95D65BAFE47EACB1F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: DD
Signing time: Sun 10 Aug 2025 23:00:54 +0000
Manifest this update: Sun 10 Aug 2025 23:00:54 +0000
Manifest next update: Mon 11 Aug 2025 23:00:54 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: ajoQoqc6QrYGS4eYCH5BNqQ3OUQw1/uycK8sUjvMSeE=)
2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:2a:91:ab:06:d9:5d:65:ba:fe:47:ea:cb:1f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Aug 10 23:00:54 2025 GMT
Not After : Aug 11 23:00:54 2025 GMT
Subject: CN=09b0a115d3855fc58232f522695795b947e7b246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:b6:cf:55:a7:b2:79:0e:de:14:ac:9c:d4:
c4:fe:46:79:92:c4:c8:7d:b5:e2:09:f4:32:c7:db:
a0:01:e3:3e:c8:a2:e5:7d:00:f4:a6:f5:23:0e:34:
c5:70:95:ae:0f:9a:17:79:2a:c0:42:4b:62:7e:a0:
6b:ca:f3:ea:7e:79:b8:eb:5e:27:db:a9:2f:5b:5d:
f9:dd:95:e5:84:7d:1c:91:b7:98:0e:16:d2:d2:07:
5b:b9:f1:2e:84:96:69:88:46:8a:e0:be:d4:cd:15:
09:3e:39:16:fb:fd:86:9c:9c:e9:f4:28:b1:66:07:
af:27:79:65:58:de:cd:f5:cc:b3:af:1b:87:6e:70:
67:53:a6:39:32:f8:69:dc:7b:9a:20:e1:7c:a0:24:
32:27:d4:dd:55:3b:85:4e:59:b4:40:a0:2f:61:ee:
80:f5:11:58:b4:58:8e:8f:7d:23:80:28:ff:76:7c:
8e:0f:d4:98:0f:ed:32:6f:a2:b9:88:2b:1a:56:24:
58:3c:20:20:64:79:71:9a:b0:cf:86:6c:03:cb:d5:
6f:59:81:19:96:b8:4e:30:bb:c9:7d:42:24:b5:cd:
9e:cc:b4:7c:84:1a:65:4e:f4:ca:0e:16:43:13:ec:
ad:35:8d:7d:38:91:95:6f:9a:d4:99:60:ee:0a:3e:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:A1:15:D3:85:5F:C5:82:32:F5:22:69:57:95:B9:47:E7:B2:46
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:f1:bf:88:b9:35:a8:b6:07:eb:0e:9b:51:37:00:64:18:
28:e5:7e:bf:31:60:41:db:f1:e5:08:fb:3f:5e:7a:5d:1a:1e:
f6:66:1a:39:9c:6c:e7:89:0d:56:4f:42:5b:7b:82:db:d1:35:
e7:2a:38:30:02:20:0f:5d:1e:4a:db:23:a1:2b:1a:9d:7a:c9:
64:4a:a4:3f:de:bf:8b:77:15:eb:55:0c:83:9a:c7:6b:19:3d:
a2:80:58:fa:50:5a:41:fd:a8:1d:0f:64:98:5d:96:30:44:1c:
d3:20:97:c3:a5:b5:5a:ed:71:bf:96:f1:da:c4:26:31:3f:46:
8c:54:7e:3c:56:c3:d0:54:9b:84:4e:8b:eb:0c:3e:f5:4b:5a:
d0:d5:a1:f7:13:7e:18:80:53:f7:26:1d:49:f9:56:60:c6:80:
ca:2c:3a:99:61:e6:93:96:1a:4d:cf:b4:b4:1e:c4:6d:cd:92:
dd:fd:f8:4e:bd:01:1f:f9:30:12:5c:56:0d:3c:7c:f5:6c:4b:
67:8a:9b:20:d2:2f:0e:7a:d1:ce:61:8d:19:dc:74:2a:82:22:
2a:59:e4:ef:32:fe:f1:36:6d:c0:46:79:f8:0d:09:c6:19:5b:
87:91:0c:82:34:74:ec:f2:d5:14:8a:51:d7:18:37:90:93:01:
7a:8f:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:16 2025 by rpki-client