Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: 70qEhgirF8Cuiv3lzbGMuyxW5OcHWgsnp8YcachxzMQ=
Subject key identifier: 43:F7:97:E6:1C:09:FE:01:CC:73:82:9B:8A:E5:58:3A:9A:C3:9C:96
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 0198A04E69902510584C5B9E6A045C080A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 22:02:29 +0000
Manifest this update: Tue 12 Aug 2025 22:02:29 +0000
Manifest next update: Wed 13 Aug 2025 22:02:29 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: 22qd5mHeGnLCMbqJAmkPAjNdJuFGUfAk1yPDb3NgwKg=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:69:90:25:10:58:4c:5b:9e:6a:04:5c:08:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Aug 12 22:02:29 2025 GMT
Not After : Aug 13 22:02:29 2025 GMT
Subject: CN=43f797e61c09fe01cc73829b8ae5583a9ac39c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:6b:66:74:1c:bd:a9:15:2a:fc:e8:e6:39:
f9:85:69:94:fd:0a:63:9f:b6:f3:cc:ca:d4:fc:e6:
e4:2a:c1:8b:aa:b9:31:20:d4:6c:bd:6d:3c:90:9f:
85:7d:48:ce:cf:f8:d0:91:b8:cb:ec:68:1b:4f:f5:
46:88:b0:41:1c:8a:e2:e0:2d:3e:03:e4:18:db:9f:
7d:bb:b5:ec:6a:23:b0:d0:e3:de:14:42:1a:10:e3:
76:4e:49:15:24:11:7c:b1:5c:d8:c9:66:ff:1e:6e:
2b:d9:e5:97:43:1b:64:98:50:94:72:32:87:0a:f2:
ce:f9:c5:6d:ce:0b:19:72:7a:95:67:5f:c6:be:20:
bd:68:b6:61:d8:09:c9:30:a5:cf:c5:ef:59:0b:48:
76:2b:e9:2e:17:45:20:41:79:04:54:5f:11:16:bc:
a1:08:04:ba:53:6e:db:15:7a:60:36:2c:6a:1b:22:
dc:d4:32:e0:cc:8f:da:13:1a:2f:57:1e:d8:4b:62:
7e:ed:5f:a0:7b:3a:db:dc:a6:42:1b:19:f7:3a:41:
69:26:86:63:1a:29:89:2e:e2:c1:4b:4d:07:45:2c:
24:d9:9f:9c:82:01:21:f6:97:73:f9:21:c9:9d:71:
ec:14:4c:46:7d:f6:cc:a4:45:45:78:d4:1c:83:b8:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:97:E6:1C:09:FE:01:CC:73:82:9B:8A:E5:58:3A:9A:C3:9C:96
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:a0:b5:4f:4e:02:b0:c9:73:55:1a:f0:ca:9a:6a:f0:c4:
9e:36:ca:f0:72:0a:4e:d7:be:f8:a7:c1:1a:be:60:1d:36:fb:
d3:7e:35:ee:20:02:de:df:bb:c9:59:c3:4d:42:56:0c:c5:ee:
13:62:5d:4e:ee:1f:16:d5:47:a6:05:e9:96:ac:db:5e:28:e9:
0c:0f:43:cf:50:e5:49:df:50:d3:6f:30:52:fd:56:ae:6a:07:
0c:43:e4:ea:b1:28:63:6f:35:5f:93:25:92:96:d3:7e:32:2b:
7a:61:c3:d3:86:4d:45:36:8d:37:c9:5f:2f:bf:08:e7:18:42:
59:24:13:87:03:df:ab:b5:07:3f:ea:ff:a1:d1:62:75:3f:e7:
e1:21:fe:d0:3c:21:c2:81:72:c1:91:2e:b5:3b:a0:f2:4a:06:
d0:41:38:fa:4e:93:55:cd:8b:5d:20:b3:7c:a2:80:d8:18:96:
86:60:44:03:d4:2c:af:a9:9c:d9:9c:4b:0d:32:f5:34:b2:71:
ab:ec:5c:30:7f:7c:b2:a4:c0:f5:37:ec:3d:14:77:cc:f4:98:
45:3c:4f:c3:98:05:49:a2:7e:23:37:b9:80:8d:a8:03:af:c5:
e5:a7:b3:3c:ca:57:fd:e1:d1:1b:fa:7f:8a:6b:4b:92:b6:cc:
25:6e:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:53 2025 by rpki-client