Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: //z4tr8V+HPcQLafDH2tk1sUnp9ZN9t1fpv1NTcz+O0=
Subject key identifier: F5:BA:E8:74:01:71:9E:41:F7:D1:71:B8:01:F6:0E:4D:1C:D0:B3:24
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 019894B870CE5F54AB17522B52E431427E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0D88
Signing time: Sun 10 Aug 2025 16:02:52 +0000
Manifest this update: Sun 10 Aug 2025 16:02:52 +0000
Manifest next update: Mon 11 Aug 2025 16:02:52 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: 2MWnoIENEzL5jZbD0aqYAEtv0rScSTAL2png/U/LPmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:70:ce:5f:54:ab:17:52:2b:52:e4:31:42:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Aug 10 16:02:52 2025 GMT
Not After : Aug 11 16:02:52 2025 GMT
Subject: CN=f5bae87401719e41f7d171b801f60e4d1cd0b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:bb:e7:0a:a3:d0:9b:52:4f:bd:7c:7d:75:
56:be:69:ed:e8:95:45:69:19:26:70:e4:81:fc:cb:
42:bb:22:66:df:eb:d4:90:46:57:cf:1e:15:a7:4c:
21:96:42:29:6d:51:3c:a3:41:b4:c8:69:90:6d:df:
75:cb:ab:24:ef:d9:20:f9:99:39:3b:01:aa:67:71:
92:2b:d9:7e:66:49:2c:e0:fd:39:6a:c3:0c:9b:54:
23:29:4b:57:de:0c:a2:d6:18:e3:b4:8f:7f:27:9a:
a2:df:b7:c5:39:fd:24:7e:62:87:8c:40:21:f0:bb:
24:46:47:79:96:69:58:e9:a6:64:b7:f0:19:83:a5:
a5:48:24:83:05:d9:a3:84:ce:18:a6:da:e9:34:7b:
a4:85:3f:c3:49:c3:2c:c3:4b:2a:fb:96:99:5c:1a:
a0:7d:8b:46:0c:f3:91:7c:66:52:d4:f3:78:fe:eb:
30:cc:d3:15:84:61:dd:13:e1:ba:d2:c7:55:42:4d:
44:07:fe:66:b2:cf:6c:48:b0:b1:37:b4:4a:ee:6a:
f4:f4:13:28:6c:2f:79:df:28:5d:0c:11:ff:a4:60:
5e:94:87:7f:a7:8c:08:62:c2:62:ee:f2:09:68:9f:
9a:2d:dd:74:81:54:8d:20:7c:f4:18:0d:22:61:5b:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:E8:74:01:71:9E:41:F7:D1:71:B8:01:F6:0E:4D:1C:D0:B3:24
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:c1:93:80:d8:ac:b3:44:56:2b:fe:db:62:d6:c0:07:05:
13:57:37:de:32:66:2e:9e:0b:09:6d:1b:32:d5:3e:3b:78:5b:
94:9f:c2:f3:17:ff:c0:b4:63:dc:25:74:9a:8c:f7:90:9d:03:
7e:0e:59:dc:3e:cd:32:1f:7b:81:c7:69:e4:ca:9e:b8:d9:4f:
f7:74:08:03:30:36:bc:09:a5:03:2a:ec:8a:5b:fd:4c:90:c3:
2a:ef:80:b5:44:37:02:28:ac:f5:be:06:42:b8:9d:09:b6:6b:
5a:10:06:47:f3:50:75:c2:c9:1f:1c:05:c7:81:fb:ed:d4:c5:
ac:d0:7a:36:3b:ac:88:2f:3f:75:09:bf:e0:54:6f:f8:ea:ab:
db:c3:d7:d8:ab:8c:3c:20:72:7f:94:91:60:50:e8:4d:90:77:
58:bd:00:50:79:5b:91:3f:28:f5:20:e5:a4:15:1c:16:67:82:
5a:a2:53:76:25:08:89:dc:ea:e6:8a:f6:cd:d4:c2:c5:ca:11:
9b:14:b3:47:6d:75:25:f0:15:9f:5f:c0:c5:d4:d7:c6:7e:85:
81:6e:6a:90:a2:9c:30:7f:f3:f1:1d:ec:0d:36:b8:92:36:4f:
ce:97:85:a9:3a:73:d7:24:ad:e2:6f:61:ce:4f:d1:b8:35:6f:
7f:47:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:01:29 2025 by rpki-client