Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: uS0qLMo8/f2Xwjv48CVJ2MBXENpUnDO3iO5AA9gImCk=
Subject key identifier: C0:B2:13:B6:5B:E6:8F:46:F2:E3:CE:5B:7B:0A:1E:75:1E:AB:EF:06
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01987306772616126BD2B50D7D508A855221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:00:59 +0000
Manifest this update: Mon 04 Aug 2025 03:00:59 +0000
Manifest next update: Tue 05 Aug 2025 03:00:59 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: DvWCAkgy8e3ZFQ9NR+SFJCKSJj1Di5p8+zYS8OuEUHE=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:77:26:16:12:6b:d2:b5:0d:7d:50:8a:85:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Aug 4 03:00:59 2025 GMT
Not After : Aug 5 03:00:59 2025 GMT
Subject: CN=c0b213b65be68f46f2e3ce5b7b0a1e751eabef06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:24:56:6c:57:15:47:31:d8:f4:d6:87:34:
86:6a:76:71:82:cc:fb:d3:c3:33:f5:48:ab:b1:5f:
ce:6d:db:27:9f:c0:1f:05:86:59:1d:be:c9:1e:17:
d1:e5:f5:3a:07:ed:da:0a:8c:82:2b:26:40:45:93:
96:c2:64:48:59:11:5c:72:36:e2:93:5b:e1:aa:e3:
f4:ec:3e:b7:34:8e:05:65:29:fe:63:e5:d6:c4:68:
e0:62:f8:a4:99:5c:65:43:56:57:5c:47:bd:f3:f8:
88:36:97:ff:3a:f0:a0:b3:80:68:e3:80:f5:01:36:
09:44:53:ea:d4:c3:f6:27:35:bf:88:f8:eb:d0:fa:
0b:fd:d1:22:14:3e:08:9f:38:6f:da:31:b3:5e:20:
d9:14:98:ca:43:04:01:1a:f1:f0:a3:65:6d:5e:7d:
e8:c6:f8:a0:4a:2e:76:17:e0:b4:19:fe:63:44:46:
ba:72:f0:6e:d6:b4:71:23:a7:7a:d4:04:b7:4d:92:
74:84:35:1e:8e:6a:13:43:f6:e2:37:4d:e1:c4:51:
9e:da:00:9a:63:2d:65:3e:d7:bb:29:0b:2c:d0:23:
99:9f:90:86:be:10:0c:09:3c:5b:61:39:31:08:75:
bf:a5:c1:ad:64:97:84:7c:6a:6a:d1:69:77:3d:b7:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:13:B6:5B:E6:8F:46:F2:E3:CE:5B:7B:0A:1E:75:1E:AB:EF:06
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0d:cb:a0:87:e5:ac:62:b4:f1:e3:c0:44:ad:af:08:b8:9a:
5d:41:84:f3:3d:96:59:d5:e8:e9:b9:1c:56:8c:85:53:34:e1:
c2:98:7e:1b:90:4b:74:e8:d6:98:ae:52:55:a2:49:e5:76:ce:
24:08:1f:de:d5:47:b7:4c:b1:80:6e:4f:f8:39:4e:45:0e:8f:
1c:86:5e:39:b4:5b:00:54:a0:42:3e:86:0f:34:12:95:17:21:
39:fe:28:fe:e6:6e:af:7a:8e:b4:dc:c9:53:df:cc:10:93:65:
99:a8:dd:0a:2a:56:86:d6:a1:c8:51:e4:ca:f4:a5:7d:01:8b:
31:0c:58:51:36:28:61:43:20:53:bf:9c:cb:80:47:e9:a1:a6:
7e:ff:83:1b:8b:56:f5:3a:70:3f:32:84:64:d5:31:c9:2e:c4:
2c:39:ff:d9:fd:27:b5:da:42:90:1d:e1:43:c3:5d:29:b6:38:
21:36:e5:84:31:7d:f2:fb:5d:b3:d3:cd:42:80:cf:dd:ca:91:
89:de:53:19:27:4a:d2:cc:bd:bb:cd:67:4d:7d:31:a9:bd:e2:
a7:ba:cf:93:a4:25:cd:12:17:6e:74:84:f6:73:24:fb:46:04:
89:0b:05:e1:cf:d0:7d:00:eb:e6:13:3b:e1:08:34:26:ba:13:
02:aa:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:46 2025 by rpki-client