Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: YJni594Ws/CmKelEKzJ/b0FaOGZpLz/uztFrOPTmWLo=
Subject key identifier: 0B:C8:B0:9F:18:D1:0C:D1:33:7D:F5:F3:A0:C6:E6:AA:5A:AD:E8:1F
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 01988E471BF87B62A0E3A6F7788276479626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 02DE
Signing time: Sat 09 Aug 2025 10:01:21 +0000
Manifest this update: Sat 09 Aug 2025 10:01:21 +0000
Manifest next update: Sun 10 Aug 2025 10:01:21 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: nyVnbDNByt1mYGn2HlVidgcRX3l5q4YS7aUhRjM80hU=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:1b:f8:7b:62:a0:e3:a6:f7:78:82:76:47:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Aug 9 10:01:21 2025 GMT
Not After : Aug 10 10:01:21 2025 GMT
Subject: CN=0bc8b09f18d10cd1337df5f3a0c6e6aa5aade81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:e0:86:a8:1e:43:a7:0d:16:e3:66:68:35:
70:fb:2c:b8:02:b3:0b:7f:64:ec:d2:36:15:90:fc:
cd:0f:0d:79:62:bd:32:64:b4:b5:1e:ba:30:71:3c:
d4:2e:47:45:20:58:a9:e4:cc:1e:96:9e:65:fc:96:
a3:9e:b8:14:87:1f:b9:d5:65:0f:8f:fc:10:a8:9e:
3c:10:63:a8:a6:2c:3c:3a:e0:ad:b0:5d:8c:8d:62:
7b:58:a1:90:dc:44:80:ad:39:38:ad:b0:42:93:10:
40:37:bb:fd:68:ff:46:b6:7c:ce:b9:96:81:ef:0f:
ab:b4:d6:7c:fa:4b:7d:58:7b:3c:74:25:62:b9:f6:
2f:71:c3:45:cf:85:eb:96:9f:9f:22:aa:62:81:bd:
5d:b7:87:cd:d4:e2:54:46:27:32:98:57:2d:56:8f:
cb:65:5d:b2:e5:8d:19:52:4a:fc:79:fd:10:7d:9f:
f4:5a:78:fc:ea:c7:a0:e3:b9:db:a0:88:f3:21:11:
49:1a:f1:ac:b1:05:45:00:e8:d0:a0:3d:e5:82:8e:
83:ef:83:c1:66:52:0c:c4:e7:24:1a:e6:35:eb:68:
bb:da:04:16:4e:b5:d0:3f:2d:eb:2d:f6:bb:35:3a:
8c:e8:60:09:e0:a6:5a:ab:cf:32:e0:91:1d:26:96:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:B0:9F:18:D1:0C:D1:33:7D:F5:F3:A0:C6:E6:AA:5A:AD:E8:1F
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:81:ec:2f:95:1c:7a:10:26:38:ad:3d:20:b1:b8:02:f2:c4:
ed:3b:ab:a6:68:6c:da:f0:8d:9f:63:53:44:78:ac:03:8c:fc:
33:43:b8:c8:8d:77:1c:06:e1:85:2d:ea:3c:2c:7f:29:69:90:
16:5c:79:6c:50:28:41:7f:72:52:bf:3d:64:f1:db:b8:69:ef:
7f:be:0d:48:a5:1b:fd:67:d1:09:2c:c0:60:ef:7b:63:dd:3a:
67:d9:4d:6b:b2:2d:29:d5:57:6d:68:be:ee:9c:c5:d0:c8:43:
25:9e:9f:25:05:87:79:e7:46:a0:26:be:a2:b6:c1:c0:70:10:
05:ac:b8:61:8c:ff:9a:1f:7b:96:e9:df:a6:6c:3a:82:74:f5:
c8:cf:21:75:7f:6f:ea:89:7a:09:7a:b6:79:32:11:71:e0:2f:
51:9a:e1:8e:36:6a:0e:f2:1d:25:6f:78:0b:4c:20:ce:18:20:
26:fb:70:5e:a1:bc:aa:e6:73:79:6a:36:46:dc:f8:57:18:0e:
3f:2e:ca:fd:f7:d1:08:7a:3b:2d:e6:a5:9c:12:23:88:9b:92:
d5:ba:43:19:c4:63:61:d6:c3:b7:c7:8d:5c:36:74:5e:06:df:
96:04:3d:99:6f:00:d0:55:66:1e:0a:71:fb:94:ca:5a:6e:33:
03:c7:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:30 2025 by rpki-client