Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: 0+Dcs9JaMbYL7WWw7HmLSkKM9ehAEjyzta/KTzFvr5U=
Subject key identifier: D2:4F:7F:52:94:67:50:E5:0A:87:7B:F9:EA:0F:89:DA:BF:2C:4B:E0
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0198819DABC5AD6B5ACFAA9A95F8A2D7D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 136F
Signing time: Wed 06 Aug 2025 23:00:50 +0000
Manifest this update: Wed 06 Aug 2025 23:00:50 +0000
Manifest next update: Thu 07 Aug 2025 23:00:50 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: PBHYNWf4m7wuktT1ZGt63D5yMFyEOgqq75aa3pT+Pc8=)
3: s0mRSNPGzNmp6WQ88QxkbOS9ktc.roa (hash: /+qWzxH2Ky85VShyjzGhO9D2cLW0/sLX7hqo1iX/VWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:ab:c5:ad:6b:5a:cf:aa:9a:95:f8:a2:d7:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Aug 6 23:00:50 2025 GMT
Not After : Aug 7 23:00:50 2025 GMT
Subject: CN=d24f7f52946750e50a877bf9ea0f89dabf2c4be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:a5:e2:8e:3a:bf:54:34:a2:2b:aa:91:b9:
38:b0:6f:e8:9f:49:45:69:ec:5c:d8:32:b5:19:14:
12:c8:7b:c9:1f:ad:6b:c9:8b:b4:e1:a2:f4:2f:bb:
3d:45:62:87:ff:eb:73:35:2a:20:ce:48:a3:0a:71:
22:e7:de:07:90:cf:79:a0:f9:59:86:1e:88:08:89:
2b:c4:cf:30:a3:ba:b7:0d:53:0a:e9:9c:f2:0a:a8:
4f:58:0d:72:f4:47:ca:c0:4c:01:ca:4a:6f:22:de:
84:8e:e9:06:26:6f:a6:94:54:b8:06:fe:93:d8:35:
ce:e3:2f:d7:d8:f3:6e:94:ad:57:37:7d:33:97:d2:
96:89:19:22:42:3f:bd:67:1b:9d:f5:4b:77:34:14:
24:6f:a6:76:a2:2e:4d:24:60:e0:64:46:08:ca:fa:
73:3c:49:dc:e8:ba:fb:62:7a:c8:75:c9:00:d8:b5:
96:a4:27:53:2a:0e:cf:a8:48:40:ff:2f:1f:a1:d5:
4e:dd:ad:4b:87:62:ac:3c:96:87:18:d8:07:35:92:
3b:b3:28:9a:5c:58:68:ec:12:6d:5c:60:d8:2b:e7:
42:18:2f:ba:3a:26:48:36:42:31:2f:e4:44:f6:f5:
90:28:31:24:9b:a6:86:67:4f:84:4f:d8:67:fd:91:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:7F:52:94:67:50:E5:0A:87:7B:F9:EA:0F:89:DA:BF:2C:4B:E0
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:51:9a:5a:31:07:70:89:da:97:58:12:3b:35:c1:11:80:
a3:ee:75:8e:22:8f:f4:dd:e7:d6:7a:7e:14:13:eb:c4:e4:bc:
17:de:e9:89:c5:a7:86:80:48:07:0d:1f:5e:c2:ac:81:3e:47:
a5:41:8c:9f:7d:f7:94:d1:3e:14:d2:54:1f:41:9e:ea:7f:5e:
34:c7:26:35:6a:ac:2e:67:86:43:b2:a3:2c:b4:06:95:8b:0d:
89:cb:09:7a:be:6f:9d:fd:53:65:17:16:70:8b:51:14:48:3e:
a5:88:5b:d2:ab:a8:57:48:e8:fe:5d:91:cc:f6:47:ba:54:f7:
49:f3:09:f8:69:c3:cd:60:e2:a0:3f:62:91:f0:b6:8c:c1:2a:
7e:33:a8:53:3f:d2:1b:be:d2:e9:cc:71:cb:94:af:d0:3c:94:
6d:f0:b3:3b:60:04:da:72:19:31:6e:14:a1:72:f2:2b:54:9e:
62:9b:69:39:6e:30:24:d7:84:ac:66:0f:59:06:8d:46:eb:dc:
cc:1e:d7:7b:a2:ec:0b:c2:03:98:9a:7d:23:db:72:51:dd:e1:
54:6c:af:22:c2:71:1b:41:ca:fa:fe:5a:84:d4:31:10:0a:bc:
bb:07:5b:c0:54:de:a7:ff:c5:27:76:3e:fb:e6:56:2c:b0:50:
72:63:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:32:14 2025 by rpki-client