Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: ZqQO/IDr707bgLqXfu46Eg/Cd1ytq6Z4qr213W9/9iE=
Subject key identifier: 5F:72:0B:96:F6:DA:33:4E:F4:95:7C:E8:E6:A5:FF:53:78:E9:FF:DC
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 01987D8B5BF8E955ECE4BD29E2C1DB10E6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:02:21 +0000
Manifest this update: Wed 06 Aug 2025 04:02:21 +0000
Manifest next update: Thu 07 Aug 2025 04:02:21 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: eySzJm5Hq9Rczx5avJOIDyZ157rJ5CEm8pbpMzRkmuE=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:5b:f8:e9:55:ec:e4:bd:29:e2:c1:db:10:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Aug 6 04:02:21 2025 GMT
Not After : Aug 7 04:02:21 2025 GMT
Subject: CN=5f720b96f6da334ef4957ce8e6a5ff5378e9ffdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:db:ec:e2:85:08:ff:69:32:6d:bd:3b:dc:
7c:a7:f2:1e:3b:00:2b:e8:98:88:5d:0b:b6:56:9a:
28:f3:52:2a:32:d6:f8:09:79:12:c4:9c:5b:ae:65:
ae:70:cb:d3:43:4e:f4:7c:9e:92:c9:ed:35:b8:f5:
a3:af:74:90:4a:28:dd:83:0f:53:0e:c0:ba:fd:6e:
32:e5:23:44:5c:e8:e0:be:21:d6:24:55:65:b2:5d:
77:42:34:f7:ba:e6:9b:fa:01:93:10:49:f3:53:ca:
a9:06:03:da:c8:ed:dc:09:19:f1:11:fc:ec:d4:24:
85:38:df:39:c5:eb:5d:5f:d7:c2:8c:b5:66:72:f2:
7d:f2:22:5b:29:4d:99:a9:a0:9f:87:fb:f8:f4:a9:
22:4d:d8:b4:1b:6a:70:3f:fd:a8:cb:75:75:31:e6:
08:ab:5a:61:ef:d4:e0:38:52:94:c3:f5:2e:48:96:
30:cd:f2:f7:eb:4c:4f:3d:c8:da:6d:a9:c0:5b:b1:
8b:03:4a:51:59:c1:59:40:c7:21:3f:54:c7:ef:84:
a0:ae:fe:b4:e5:eb:17:44:1b:24:e5:16:79:c8:73:
a2:9f:c1:8e:3e:c9:ef:49:2d:b1:8c:fa:83:83:ab:
dd:bd:f6:11:0e:3e:22:c1:e1:bd:d4:12:90:0a:5a:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:0B:96:F6:DA:33:4E:F4:95:7C:E8:E6:A5:FF:53:78:E9:FF:DC
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9e:ce:84:c2:6d:6e:6e:a3:fb:d9:ca:7e:d3:d4:c7:cd:72:
08:83:df:68:22:c3:e8:d9:66:82:42:68:8c:c7:97:88:2a:c7:
c4:dd:f3:0c:3d:4e:24:59:ec:db:ac:b7:31:90:87:46:18:2c:
7a:cf:6b:80:7d:ae:db:49:1a:c1:ec:72:51:ee:6e:19:64:14:
1d:ec:90:64:f7:79:61:54:2a:e7:21:61:f6:a3:07:09:66:90:
8a:7a:aa:a1:e3:65:ca:e8:51:e7:1e:ad:39:85:18:2a:fc:24:
ff:a1:58:f0:e3:26:30:b5:ab:56:b7:b4:59:ba:50:8d:13:20:
ed:dd:c5:09:cf:bd:bf:58:d6:de:7e:96:b9:47:9d:45:92:ab:
48:4d:24:ad:f9:13:b7:35:34:40:67:a4:8c:7a:f3:16:5c:2d:
d8:e0:2a:1e:f0:a0:34:a1:d1:03:6d:72:0f:fa:27:14:c3:3c:
b1:fb:0a:8b:de:14:f7:4f:fa:f8:8b:c2:77:58:df:11:2b:1e:
09:f5:d7:57:e9:5c:a6:56:9a:99:3a:c2:b6:c3:16:61:94:75:
d6:15:75:17:e3:f9:38:b7:6b:29:78:a3:41:68:cd:c7:14:ef:
d5:78:52:c3:c0:0e:a0:2a:26:f3:87:6d:18:e0:04:c2:ea:55:
cb:05:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:33 2025 by rpki-client