Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: f6EIjik9e61yZrlVlEEaCzENKfxRmjcvy/54r8Vbx/U=
Subject key identifier: DB:2D:81:33:A8:62:78:28:62:E4:78:D0:04:6F:C5:9D:29:B6:6B:52
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019885B141B1DC52FE2968182DA7D81778A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 06B3
Signing time: Thu 07 Aug 2025 18:00:43 +0000
Manifest this update: Thu 07 Aug 2025 18:00:43 +0000
Manifest next update: Fri 08 Aug 2025 18:00:43 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: Hyb5GS+rpoAFjdovRxSOWwE0Hl6goJA20MkNd5rYCJo=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:41:b1:dc:52:fe:29:68:18:2d:a7:d8:17:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Aug 7 18:00:43 2025 GMT
Not After : Aug 8 18:00:43 2025 GMT
Subject: CN=db2d8133a862782862e478d0046fc59d29b66b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:f2:fc:3c:72:7d:1d:91:ff:44:16:9c:07:
c1:0e:fb:69:cf:32:6f:16:4c:43:d6:19:e6:dc:67:
09:7e:4a:3e:8a:93:5f:03:14:d6:58:64:32:34:45:
5c:61:00:b2:12:3a:24:3a:a8:f8:63:b8:a2:d3:23:
9c:e9:62:d4:34:13:f8:8e:52:2a:72:45:4c:93:42:
de:9d:57:ad:5d:25:74:28:45:40:0d:15:4c:d7:03:
3e:c4:58:97:6a:3a:05:0f:23:48:c1:1e:7a:0e:c6:
c5:a8:a9:be:0f:c9:9c:7c:90:3b:5e:6d:6b:19:59:
84:7d:3a:38:2e:97:6e:93:bc:be:77:72:7c:0b:b1:
29:4d:c9:3b:57:29:2e:01:51:86:ff:cd:6e:d0:82:
9d:ea:4a:e6:ac:63:30:0c:39:41:ff:c4:2e:5a:d6:
6f:bc:7a:c3:57:10:35:e5:f2:0a:6a:d2:84:f5:70:
96:5a:76:ab:dd:4a:99:89:b1:8f:b5:6f:82:61:f2:
0f:f4:e7:49:ef:57:a5:d6:e5:72:2f:6e:ee:ff:f2:
05:e8:37:9e:e4:2c:af:79:09:37:f7:b7:eb:46:fa:
1c:5e:1e:af:93:89:5f:14:bd:df:61:c8:58:81:59:
ba:3c:92:32:e2:72:d5:ae:ef:eb:de:27:cf:9d:a5:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:81:33:A8:62:78:28:62:E4:78:D0:04:6F:C5:9D:29:B6:6B:52
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7f:01:46:1a:3a:4b:98:ae:51:8c:17:41:2a:3f:65:b6:cd:
33:45:04:42:d7:e9:26:ea:fb:65:29:32:0e:e5:9a:b1:2e:97:
4e:bd:65:df:df:7d:09:f6:38:51:94:16:f0:31:3e:03:7c:06:
c3:b1:de:75:63:23:e1:53:ee:43:8c:62:e5:cf:51:ce:e0:9c:
1c:d0:88:68:6a:5a:d1:b0:09:d4:ca:9b:b2:05:4b:40:8a:1a:
a3:31:70:0e:13:8e:41:ed:b8:68:bd:ae:43:49:15:8a:85:22:
bf:b9:d0:8c:de:6f:5f:ef:06:71:20:d3:92:e8:8c:f9:80:a1:
cd:5f:46:9d:19:0b:33:28:09:34:6f:1e:48:bb:b1:68:87:7c:
d5:62:1c:26:77:04:af:ab:40:f9:a4:01:46:eb:5d:bf:9a:d6:
69:20:46:1b:1a:03:a2:cd:99:f0:e5:60:d5:11:2b:86:4c:70:
04:34:bd:0c:ff:3b:b1:08:f4:eb:7a:6d:c5:90:7d:7b:18:eb:
c4:d3:59:20:a3:ff:7e:48:56:2c:59:b1:23:bb:7b:1f:19:69:
21:ec:74:43:9a:5c:5a:19:e0:37:8b:f8:2a:5a:83:60:0c:68:
c1:74:41:cd:18:11:7b:44:15:bc:0a:4a:1a:d9:49:71:22:ca:
3d:6b:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:06:42 2025 by rpki-client