Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: FY52y3BdGI6D16Jxjrzxul+2CmuqpIIj7Mg4CCMLIik=
Subject key identifier: 4A:20:08:49:05:10:F1:4C:50:D1:7F:FC:1B:BD:17:6D:92:AF:E1:A3
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019872CF504D43353175A57CF0D60A1BB943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 0401
Signing time: Mon 04 Aug 2025 02:00:45 +0000
Manifest this update: Mon 04 Aug 2025 02:00:45 +0000
Manifest next update: Tue 05 Aug 2025 02:00:45 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: ctkK3bmsIjCcd8jqJVNZdny9hUy1NiSl4hFIkiumSJc=)
2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:50:4d:43:35:31:75:a5:7c:f0:d6:0a:1b:b9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Aug 4 02:00:45 2025 GMT
Not After : Aug 5 02:00:45 2025 GMT
Subject: CN=4a2008490510f14c50d17ffc1bbd176d92afe1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:00:07:f2:3b:c1:32:57:66:46:92:67:73:
28:64:a9:ef:00:bb:e7:02:67:74:04:bd:43:16:f5:
94:20:18:40:8e:67:eb:8e:0d:a9:36:26:a9:bb:a4:
70:c5:3e:8b:2a:51:fc:8c:e1:ce:91:2a:2c:8b:7f:
e9:6f:ec:b0:66:26:4e:a8:62:60:e3:2c:86:13:c6:
48:fb:cc:f1:99:5d:08:cb:83:20:99:69:39:6b:e4:
2c:86:19:ea:51:0e:db:d0:0b:3f:73:3c:f7:75:4f:
ed:29:9d:cd:47:aa:c8:e8:c7:a2:d8:25:c9:10:83:
72:9f:e5:76:9e:8d:c9:c7:63:00:41:9e:88:8c:db:
03:50:55:b4:39:60:f0:77:ac:57:5f:14:bb:59:6f:
16:74:e4:52:dc:61:f8:cf:76:c8:3a:7a:8f:46:55:
a0:52:5d:f0:d4:7a:b0:ae:99:88:6b:bc:7b:57:5b:
bc:2a:16:f0:b9:e9:e2:e5:23:62:2d:87:81:10:8d:
9d:30:99:88:8b:8c:77:b0:a6:b2:bf:17:5d:0d:1f:
28:e3:37:56:ad:78:5e:5f:b2:be:38:ca:7b:fc:ff:
f6:f3:ac:63:ad:d8:96:92:d9:98:02:de:a4:02:cb:
1f:83:04:b3:ad:c6:34:87:4c:4b:f9:b6:88:3c:39:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:08:49:05:10:F1:4C:50:D1:7F:FC:1B:BD:17:6D:92:AF:E1:A3
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:84:18:e3:12:36:00:e6:6c:7a:4d:47:2d:70:20:57:9f:
f6:e3:81:3a:40:dd:98:e2:17:25:e9:4e:4e:42:72:d1:5e:4a:
e8:48:ac:9d:7b:e7:f8:40:e1:64:a5:04:77:bf:b0:37:d7:3f:
0d:5b:33:aa:25:05:f4:81:b5:5c:1f:d1:3b:82:18:2b:a6:1b:
3e:7d:ff:85:12:b2:9d:3d:fd:ec:02:33:01:d6:d6:93:d9:25:
b0:34:ef:a0:e5:d3:8d:60:d3:d9:bc:2b:38:f9:84:80:2c:d2:
19:dc:c4:95:45:30:a4:2e:a1:59:ed:bc:09:e2:94:72:d0:e7:
a9:9d:0e:ab:72:a4:7f:65:a9:a5:15:4f:1f:86:c2:b5:6a:f3:
45:82:50:fa:4b:5f:e3:e8:ba:28:da:6f:4f:c9:8a:27:72:e7:
9f:d2:a3:dc:94:c9:82:a4:07:30:a7:7e:42:81:a5:11:2e:b5:
82:6e:a7:d9:6e:64:fd:9b:3d:10:12:12:0a:af:19:08:7e:58:
5c:5a:86:64:23:96:90:b2:e0:b0:2b:9f:05:c6:3c:04:c3:21:
c4:d3:b6:8b:5f:c0:20:ac:69:7f:fc:3d:c0:2a:ee:26:01:2e:
a9:71:2a:40:93:89:68:2b:72:19:c3:27:b8:9e:59:5d:cb:29:
c0:a4:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:13 2025 by rpki-client