Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: Ba0XVugx7Ib5RibGxsSbuk5kPuvA6+o4StVstgimwHI=
Subject key identifier: 8D:0F:B8:0D:20:22:E6:70:C7:2A:4F:F5:E1:5C:8F:99:74:79:28:26
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 01987908C4A768B1665B7F16E1A801686C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 1460
Signing time: Tue 05 Aug 2025 07:01:14 +0000
Manifest this update: Tue 05 Aug 2025 07:01:14 +0000
Manifest next update: Wed 06 Aug 2025 07:01:14 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: YYTmjLWEY95UE9rfaZVvikgoGyYwP2T8AYmYH75VpJw=)
2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:c4:a7:68:b1:66:5b:7f:16:e1:a8:01:68:6c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Aug 5 07:01:14 2025 GMT
Not After : Aug 6 07:01:14 2025 GMT
Subject: CN=8d0fb80d2022e670c72a4ff5e15c8f9974792826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:b7:43:4c:4a:cc:06:5e:86:b9:73:76:12:
26:80:57:89:ec:d3:74:68:90:37:30:ba:e9:3d:68:
88:7a:f4:cf:10:eb:4d:84:ac:9c:8c:a0:cf:15:ea:
93:fd:fe:37:66:d1:1d:69:8a:a2:80:69:59:19:1b:
87:e9:e7:81:22:f4:ed:60:93:5e:27:01:4e:de:51:
ab:d2:63:42:42:14:d4:ad:58:8f:2b:f0:68:dd:2e:
7c:c5:40:d9:e8:f4:1d:0b:99:98:34:e4:9f:c2:db:
dc:8a:57:51:d7:28:a9:c1:a9:a9:14:a4:ea:96:b5:
b8:f0:fd:5e:bf:98:23:c4:72:02:fb:2f:b3:b0:8b:
1b:1f:c3:25:7c:dd:a6:80:32:18:6d:84:aa:d5:bb:
5d:f9:25:03:a0:b1:0a:72:2a:33:78:95:76:be:3a:
87:e5:57:be:4a:bf:1f:20:77:ab:b9:ae:49:1b:e4:
e1:42:d2:c1:46:85:aa:02:1b:af:d6:ff:a5:fe:f6:
6a:a9:f0:f0:46:db:68:9b:0c:e9:61:ff:cf:de:7e:
9a:64:c2:cf:a7:e6:48:92:6b:d2:db:33:b4:12:01:
48:f9:69:d3:e9:53:11:0d:c2:8d:14:f3:d8:ad:38:
a5:fd:26:8e:d3:8d:6a:f1:05:dd:6c:59:21:45:3e:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:B8:0D:20:22:E6:70:C7:2A:4F:F5:E1:5C:8F:99:74:79:28:26
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:11:79:74:3b:9e:02:14:78:13:26:59:51:28:2f:36:d0:
af:54:b9:9a:43:e4:93:13:ec:c7:9a:b4:fd:d9:67:70:33:fa:
ea:ca:c8:e9:3c:33:04:26:f7:a4:3b:bc:69:9b:a1:f3:36:f3:
2f:0e:df:78:0e:55:12:32:b2:40:7b:eb:58:27:67:4f:a7:4f:
89:ae:7c:c4:c2:36:85:01:70:a6:35:15:2a:dc:b0:de:b1:da:
10:fc:7b:80:02:8d:bd:07:34:f7:81:8a:7c:19:23:e6:48:62:
3b:85:f2:d3:9d:56:1d:84:18:16:4d:ec:26:d6:d8:e3:97:dc:
6e:1a:87:e3:80:08:fc:d5:a8:d0:e0:e1:6b:6e:12:81:50:ab:
9b:4f:33:18:92:84:b4:b3:f3:18:57:f4:f4:49:6e:04:9b:06:
e6:e7:d8:45:49:f3:67:7e:ae:c5:81:f1:de:03:b2:55:43:a2:
0a:3a:99:6f:e8:83:c3:fb:fa:55:10:d6:89:51:05:28:63:dc:
21:87:b3:15:8b:6d:71:0a:fe:93:ad:ae:a4:ed:47:c2:e0:3f:
dd:6a:d8:cf:cc:58:b8:39:66:68:60:d3:50:a9:d6:33:6b:9c:
c8:25:af:92:aa:e3:6b:3c:f0:59:26:d0:c5:3b:c6:16:61:6b:
5b:85:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:07 2025 by rpki-client