Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: vdSxmcJbZ1iCJp9cPRDf6b1VRubTuPY3YlmblEmwfPk=
Subject key identifier: 28:33:F7:67:94:F0:3C:05:E4:D3:0A:2E:1E:B4:AB:F2:A2:C2:AA:9B
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 01988CFD8039C5589F2293E158A3EE1ACD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 04:01:20 +0000
Manifest this update: Sat 09 Aug 2025 04:01:20 +0000
Manifest next update: Sun 10 Aug 2025 04:01:20 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: UHB74mmqIqAoRIs9qZTM3Mb8cnpnsey6eI9MFW2Unyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:80:39:c5:58:9f:22:93:e1:58:a3:ee:1a:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Aug 9 04:01:20 2025 GMT
Not After : Aug 10 04:01:20 2025 GMT
Subject: CN=2833f76794f03c05e4d30a2e1eb4abf2a2c2aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:41:b4:b6:72:ca:eb:9d:ae:7a:35:65:4d:
31:3d:24:2b:31:69:b1:8c:d9:64:8b:23:2f:e1:18:
b7:06:61:20:cb:b6:0d:74:aa:71:70:bb:74:f5:2f:
93:7c:b3:42:1b:87:c6:cd:90:ac:95:2f:17:19:1e:
3c:3c:0d:51:35:2a:f2:8b:12:9e:25:38:ac:e5:ee:
8e:9a:a2:23:37:99:5e:03:c7:d9:e2:78:a9:f4:7c:
88:77:f9:17:40:27:fb:df:07:98:8f:37:bb:63:0a:
9c:61:37:98:97:7a:22:a1:bd:d5:a2:d4:51:82:a3:
a8:50:07:53:c5:54:63:e8:c8:cb:90:2b:18:ef:2a:
9c:dc:8e:e2:9b:b3:57:cd:55:47:f5:51:c2:31:04:
7e:4c:39:93:7f:a6:5e:4e:a1:35:48:ff:d8:72:45:
f2:30:d9:97:8b:fb:59:b4:33:cd:65:34:2e:39:33:
bb:4a:82:c7:c8:16:39:40:55:62:de:f5:80:2a:78:
29:60:c6:f1:e0:ee:15:8f:87:c3:b0:5a:4e:3e:b2:
aa:8b:49:92:02:32:61:c2:7d:4b:b9:06:86:3b:47:
83:a5:8a:90:02:62:7f:e1:35:c3:e9:2c:98:71:9a:
46:6b:ee:fa:d1:35:08:11:74:3f:f0:71:86:5d:b0:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:F7:67:94:F0:3C:05:E4:D3:0A:2E:1E:B4:AB:F2:A2:C2:AA:9B
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:dd:3d:c2:2e:f0:dd:e6:fb:13:b0:94:b0:c7:dd:94:34:79:
cf:e5:7d:fe:0e:8c:81:83:41:ed:d6:e8:24:0c:f2:e3:62:d2:
97:fd:ac:83:e5:8e:c2:69:ef:ec:bd:a1:21:15:16:f9:06:82:
ec:58:39:09:8c:82:28:89:e5:be:63:6f:04:3d:92:fd:76:b0:
2c:0c:cc:ed:9a:7b:c9:a0:68:f0:eb:c3:1e:b1:de:dd:e3:7f:
84:b2:9b:57:7a:91:d4:7c:44:ee:4f:41:47:33:a7:6a:e3:40:
04:55:db:53:b6:8a:30:80:4b:d5:29:88:2e:0a:99:9f:6f:a8:
1f:45:f2:6e:35:21:de:d6:cb:4e:32:70:96:83:35:72:f4:22:
01:e6:49:37:73:e0:a9:1a:43:1b:12:75:2b:48:1d:2a:a7:9b:
1c:eb:09:97:66:b2:b9:60:6b:ec:55:ae:7f:42:0e:a7:e4:4e:
49:db:ba:be:e3:d0:63:34:34:4e:ec:d5:55:35:f9:1f:d9:cb:
cd:1a:93:2f:21:fb:03:64:92:6b:1c:e4:3a:64:80:41:28:e4:
ca:68:5c:3f:c7:72:3c:0e:22:58:67:bf:2e:7d:68:d6:04:ec:
49:dc:53:c9:36:d2:f9:db:bc:f9:db:e4:40:06:24:f1:56:c6:
12:70:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:21 2025 by rpki-client