Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: 1HOo2Gxse6ZNi+n2SYEKsqIMN6m7fXM0nBLv2/GMqYI=
Subject key identifier: 89:37:ED:3A:19:F8:4B:7A:24:19:20:F0:23:45:68:F7:D4:2C:47:91
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019872CF2E5EBBBAA544B56AFDDD1A5782EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:00:37 +0000
Manifest this update: Mon 04 Aug 2025 02:00:37 +0000
Manifest next update: Tue 05 Aug 2025 02:00:37 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: 2FV8XvEXa13meCuNngkiK++8wQycxOwp/7vf9iURWSA=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:2e:5e:bb:ba:a5:44:b5:6a:fd:dd:1a:57:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Aug 4 02:00:37 2025 GMT
Not After : Aug 5 02:00:37 2025 GMT
Subject: CN=8937ed3a19f84b7a241920f0234568f7d42c4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:95:0a:5d:98:19:bb:9e:ca:97:88:bc:2c:
75:22:eb:7e:75:ba:c8:cd:7b:a6:c6:56:34:4e:53:
b1:fc:34:c1:bc:63:a4:6f:ea:73:47:40:76:13:8e:
68:38:a6:73:26:eb:ad:55:cd:65:58:fe:c6:e5:3b:
75:12:d6:fd:fb:aa:cc:5e:f1:41:2a:00:2e:90:50:
c7:10:10:ad:7c:43:29:0c:c6:89:19:cf:8a:d2:02:
a9:0d:96:88:60:c1:3e:58:e4:d5:6e:84:28:6d:49:
c3:3c:4a:e6:9b:0b:60:0f:87:30:b1:11:fb:1b:36:
00:9c:4b:9f:37:4c:36:af:65:56:42:c6:37:f2:b2:
45:82:a9:96:e4:f9:c5:02:30:85:1d:f7:43:ec:38:
43:ac:fd:78:51:cd:09:09:46:8e:f0:25:84:01:4f:
69:ff:c3:7a:ec:55:f5:d3:75:ff:eb:03:7d:50:98:
b3:30:2e:fe:ff:77:7d:4f:48:64:09:4d:10:8d:a5:
2d:50:20:97:57:7a:6d:5c:ab:58:92:4f:e4:1e:9e:
0b:1f:19:51:27:ad:b8:31:cc:a4:4f:e1:92:93:c4:
99:ea:f8:8b:f0:0f:aa:85:89:b5:63:fa:69:ac:5b:
a4:02:70:65:26:56:c2:44:05:f1:e8:65:11:4d:16:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:ED:3A:19:F8:4B:7A:24:19:20:F0:23:45:68:F7:D4:2C:47:91
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ab:9b:de:47:8d:cb:03:82:bc:55:28:90:f0:ad:ac:40:6a:
74:fc:9c:66:36:d2:bc:dd:a0:ea:04:5f:ed:00:53:f3:d6:12:
8a:9a:6c:35:49:01:29:94:25:15:44:49:c2:98:03:e6:3d:06:
3d:fe:11:ab:20:6b:7f:49:9e:fc:75:80:3e:a8:27:0c:64:d5:
bb:77:f1:bf:d8:c4:0e:ea:8d:85:a1:73:f6:eb:9c:91:f0:60:
3b:83:5e:42:01:2f:8c:76:4b:6a:1b:4f:b5:11:04:fd:25:b8:
cc:24:b1:57:c5:61:27:80:ac:d0:cb:bc:9c:61:d1:6a:90:73:
0c:47:fe:60:4d:85:8e:27:ef:d8:85:0c:53:b9:a3:77:ac:ba:
77:b0:3b:56:d1:61:fc:72:1b:4d:1e:0f:7e:a2:53:c0:b7:9c:
d1:bc:a1:10:e1:63:a8:67:74:48:2f:a7:81:24:c5:8f:6f:57:
6c:2c:e5:62:8f:9f:67:30:df:b3:3f:ba:be:53:45:2c:5c:4b:
50:29:0a:85:e5:e0:9e:12:24:f7:3c:12:4b:e5:58:ca:fc:e7:
55:13:ea:de:7a:33:79:de:fd:1d:81:f4:63:8e:22:e4:b7:3e:
08:ba:3e:41:c6:21:c3:81:b0:40:d5:37:be:e7:6a:0d:fd:29:
ed:42:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:55 2025 by rpki-client