Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: ZV3/4RBKq7Q8iWO6QE8kR6/MbxR+9tGJ/UF+rv2SVAg=
Subject key identifier: 02:78:1D:F8:25:94:98:EE:33:8C:24:EC:76:A0:53:6A:37:EC:15:A2
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 01987298F97D19DBCF96E9F0BBEC9482940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 01:01:24 +0000
Manifest this update: Mon 04 Aug 2025 01:01:24 +0000
Manifest next update: Tue 05 Aug 2025 01:01:24 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: KDktppSjbH768xXAqblmIE8NgZuRIM1sr+IbOPC8mTE=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f9:7d:19:db:cf:96:e9:f0:bb:ec:94:82:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Aug 4 01:01:24 2025 GMT
Not After : Aug 5 01:01:24 2025 GMT
Subject: CN=02781df8259498ee338c24ec76a0536a37ec15a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:51:e9:00:b7:1c:72:8b:22:1c:0a:d1:c5:
0c:0a:34:03:77:1f:7a:24:2b:61:35:ef:fa:7f:3c:
9a:9b:b9:2e:64:1e:ea:b7:83:81:c5:4a:ea:37:f3:
bf:38:da:64:1a:fb:4b:58:a4:e2:ac:67:a7:72:0e:
74:8f:b2:86:14:da:bd:b2:8f:c0:12:2b:03:a7:de:
42:c5:76:33:8b:ac:ab:e0:49:dd:f7:ea:76:35:c7:
f9:24:8d:ed:ad:69:08:47:8c:b1:5a:ad:a3:0f:29:
a7:64:65:35:e4:cd:fd:f9:f6:dd:d6:32:14:14:a5:
6c:5b:0c:87:45:08:bf:00:f2:9b:8c:3b:43:b9:d1:
ea:47:86:aa:83:a6:3e:d4:fd:58:a8:3a:91:0b:8b:
6e:47:05:da:9b:6f:88:b5:0c:e3:29:6b:b7:8d:3d:
4d:da:cf:91:49:af:bd:18:ed:7c:2d:26:44:53:a6:
e0:ad:96:1f:b8:2a:f3:05:e9:2e:c9:8f:b3:0d:96:
02:0f:40:46:75:f8:c9:2f:b8:57:65:ba:82:ef:3a:
12:0a:e6:20:9a:f0:54:c4:bc:aa:3f:cd:b5:6b:19:
fd:25:10:ef:43:ee:76:7b:cc:a6:a9:66:ab:f3:5c:
ce:be:df:28:af:47:15:20:03:92:2b:e0:c2:e3:d5:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:1D:F8:25:94:98:EE:33:8C:24:EC:76:A0:53:6A:37:EC:15:A2
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bf:78:ae:05:df:ab:60:e5:a6:25:56:ca:c4:e7:a0:b1:9f:
3c:19:86:2c:25:95:20:0e:03:e1:2f:64:a6:20:b8:69:f3:00:
c3:97:bc:30:98:be:b0:54:d7:78:ea:51:76:1b:0c:02:68:30:
b2:bf:1c:54:45:10:f5:eb:5e:e5:79:68:19:81:09:a6:b0:a3:
dc:24:74:c4:47:0d:df:9f:8e:32:aa:3d:67:8e:3b:ff:97:d3:
50:93:32:a9:b8:19:1c:5b:24:a2:17:cb:5c:a6:20:4e:a0:9e:
59:7a:52:2b:4c:ad:97:81:40:57:84:4a:25:b2:bb:1a:61:81:
b7:fa:43:e1:aa:0b:d4:bf:ca:d2:d8:d1:4b:97:87:2a:04:28:
9f:d2:08:b2:63:cf:39:81:69:71:8a:bb:13:11:c5:19:d9:47:
d2:cb:4c:d9:e3:bf:1d:3e:7c:c8:e9:97:0a:af:14:dc:54:d2:
5f:41:59:1e:61:7b:e5:e7:45:0e:bb:85:65:24:5d:7e:39:7c:
93:c8:bc:ee:ac:02:dc:07:55:62:27:98:85:62:67:c8:1a:19:
a3:a7:09:2e:7e:a2:0f:54:13:8e:f7:0a:fd:ef:47:e7:60:94:
fe:2e:a6:5f:d1:1a:21:47:a3:c3:97:a6:23:fe:e1:67:6c:ad:
ee:37:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:18 2025 by rpki-client