Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: Xax/tM7PUgmdjmOk8qcbBdao/uNDxa84aW7uYnIz38U=
Subject key identifier: 5F:BD:6C:81:FA:BA:CA:5D:4E:40:B0:8A:54:31:91:22:20:4D:AD:67
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019872988E8E97DD705562C7779D247BB55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 053F
Signing time: Mon 04 Aug 2025 01:00:57 +0000
Manifest this update: Mon 04 Aug 2025 01:00:57 +0000
Manifest next update: Tue 05 Aug 2025 01:00:57 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: DdQdyyCdpQfP1pTg4GnnZNSXH4UoqV9YCWKsBDcQNo4=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8e:8e:97:dd:70:55:62:c7:77:9d:24:7b:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Aug 4 01:00:57 2025 GMT
Not After : Aug 5 01:00:57 2025 GMT
Subject: CN=5fbd6c81fabaca5d4e40b08a54319122204dad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:18:c0:25:df:6f:a0:12:bf:80:a8:3c:82:
3c:e6:fb:a9:05:54:30:a1:c9:47:ce:02:12:1b:68:
a1:ff:cb:df:8e:f3:f7:bb:e0:21:37:3b:ce:19:6d:
cd:56:9d:41:43:44:96:4b:ee:ac:cf:e4:44:8f:fc:
c7:59:e3:aa:76:6a:d5:ef:04:43:15:9b:9c:a0:36:
3c:ac:c5:34:b2:14:e9:14:2c:2a:11:65:20:63:58:
4d:5c:1e:36:99:31:2d:52:7b:0e:b7:dd:75:91:94:
6f:71:98:24:7f:82:90:cc:f1:df:94:f2:fc:60:75:
81:fc:b3:76:34:51:2e:ee:2b:90:f9:03:a8:74:56:
0f:b7:b8:25:ec:86:dd:87:b5:28:d9:8d:18:5f:35:
bc:47:0c:3d:29:41:c7:51:f4:ce:ca:9c:d2:67:fa:
67:af:94:3c:3c:55:c0:a6:5d:9b:3a:65:4d:16:b0:
cd:2a:2f:94:8e:2a:de:28:01:20:15:0d:6c:6c:28:
e2:c3:b7:f2:d7:2e:6e:26:2e:29:1e:49:5f:b9:07:
6f:da:3f:87:e8:e3:17:ef:ec:ec:dc:61:fa:15:b2:
77:e4:46:15:63:18:52:50:95:9f:44:4c:e6:fc:e9:
a3:f5:4e:56:76:c2:d1:b5:52:87:69:32:7f:f9:a7:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BD:6C:81:FA:BA:CA:5D:4E:40:B0:8A:54:31:91:22:20:4D:AD:67
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:57:89:cf:53:8b:cd:46:d1:fb:ad:2c:fa:a3:e7:56:7e:e7:
19:d4:57:98:f6:8b:a3:16:d3:91:ca:42:c0:cd:31:c5:f2:2b:
41:76:48:bc:c9:6e:e0:1d:9d:44:33:63:0b:f7:30:9a:b7:97:
7e:73:5a:c9:3d:ed:b7:1e:10:18:b7:8a:c5:3c:98:8c:18:a5:
fa:f1:bb:b4:2e:c9:31:77:f1:2f:c6:25:09:cc:67:af:8f:79:
a2:a6:43:70:9b:02:ed:20:48:7b:57:01:20:4b:cc:18:6c:84:
d3:8f:4d:32:5b:ac:77:41:a3:ff:79:7b:90:ef:f9:d2:96:3f:
1f:8f:c3:06:a1:5f:ef:e1:d0:c0:e0:7a:53:eb:74:8e:57:f1:
7f:17:88:75:fa:ad:f0:42:ca:1a:10:7e:c3:c6:81:11:58:68:
91:61:2a:c6:f1:ac:9d:db:cd:fd:92:c9:32:6c:b8:e7:7d:e6:
6c:6a:8f:e7:d3:d4:c9:57:a6:5b:d3:3a:12:80:e1:e9:ad:34:
a8:cc:6a:20:86:1b:ef:2e:e1:fa:af:4e:3b:41:63:31:9d:7e:
20:c7:44:a9:ba:74:3c:a0:3b:09:45:66:39:62:a7:1d:c7:2d:
5e:b5:68:4f:22:45:6a:cb:46:6a:5d:4b:36:65:0b:10:8b:e9:
16:55:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:57 2025 by rpki-client