Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: BGhhHkK0JPH7sboGZPGmBU4pB5k9MOoqx60LtnXTq/Q=
Subject key identifier: 81:B6:17:E3:86:29:79:F9:8B:42:3C:70:50:08:E8:E1:2D:91:B6:0C
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 01988B4566996B4AC8535F106F0051B515E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 20:00:37 +0000
Manifest this update: Fri 08 Aug 2025 20:00:37 +0000
Manifest next update: Sat 09 Aug 2025 20:00:37 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: NXG4ZetTVT+avVKB/pNmRIGg8ozXSG/sQa1jgF/LQA0=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:66:99:6b:4a:c8:53:5f:10:6f:00:51:b5:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Aug 8 20:00:37 2025 GMT
Not After : Aug 9 20:00:37 2025 GMT
Subject: CN=81b617e3862979f98b423c705008e8e12d91b60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:89:4f:9e:46:81:02:a7:0b:19:eb:36:38:
07:83:7f:37:e1:b5:51:e6:87:f4:6e:cb:72:25:aa:
05:c0:6f:f1:26:9e:a5:26:4b:17:d9:46:fe:cd:79:
f9:64:5e:85:28:40:4d:c1:af:99:ab:82:f8:1a:38:
eb:f2:c4:9d:96:b0:d9:1a:51:52:b7:a2:84:0c:b0:
3e:7d:1a:bc:d0:fc:54:49:2d:c8:12:98:52:76:b0:
c5:11:22:07:08:2d:6c:52:65:9b:44:c6:fc:7a:df:
b4:c9:45:db:2f:4f:58:8a:9c:0e:54:b8:8c:4b:23:
18:2f:da:0f:e6:c9:07:1e:44:47:00:07:79:e5:48:
4d:50:4e:9a:4e:33:b2:04:86:2a:7b:69:27:99:45:
98:87:3e:7a:a0:eb:ec:dd:65:4e:a7:a2:4f:92:1a:
51:e5:d3:32:5f:a0:f8:1d:76:e6:34:0d:03:5e:b7:
1e:65:17:bf:c5:af:53:d5:d6:b6:13:1c:1e:98:04:
cb:d8:3c:9e:25:6e:56:3d:db:a9:4a:52:fc:26:f6:
94:b1:95:61:ea:42:68:a8:3c:fb:c1:ac:94:00:df:
56:3f:e9:18:4c:79:79:71:6e:b7:13:36:15:c4:18:
d7:2a:ac:1a:ee:76:a1:cf:e4:5a:41:92:11:3f:20:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:17:E3:86:29:79:F9:8B:42:3C:70:50:08:E8:E1:2D:91:B6:0C
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:93:8b:6c:ff:fa:97:fc:45:a7:6c:6e:a5:83:d6:88:14:5d:
d2:96:47:f5:14:3f:56:14:6e:8c:9e:30:4f:6d:e0:d3:c5:a4:
c1:c3:ba:e6:8a:0e:a1:8d:03:a6:6a:be:bc:90:df:99:51:85:
47:a5:ae:75:77:7b:91:2f:08:d1:81:19:f1:d5:49:58:e5:9a:
2e:eb:37:b6:c1:5a:a9:e7:8e:ea:45:75:97:bb:17:e1:2c:09:
78:1c:0a:e7:b8:40:03:17:66:d1:71:02:a4:10:c9:ce:ab:5a:
61:27:3a:b2:f1:3f:96:a9:01:df:bc:2f:b9:09:c1:62:b3:98:
bf:d6:fb:55:3f:83:d2:04:b1:97:77:f2:93:7c:75:de:72:16:
84:4e:fe:05:37:eb:8b:d7:83:4e:59:b1:58:90:1b:cf:1a:6a:
c2:68:df:5f:ef:59:f6:33:eb:5c:1a:09:97:c6:d2:85:39:bb:
f1:7c:c8:0f:2b:89:8e:28:00:ab:f6:c1:fb:77:d4:f6:db:b4:
8f:ba:61:c6:3b:51:fa:42:6a:40:8b:f3:be:89:ef:8a:bc:72:
5f:32:e8:be:88:3f:b6:16:d4:26:40:bd:95:a1:3d:b8:2c:04:
56:cf:d4:71:a1:2e:48:60:7a:1c:95:4a:0d:3b:39:32:1a:46:
d4:46:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:50 2025 by rpki-client