Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: XNTer8kzMn76HAlNE5GpHXh+5DB9HNPAXvPj8KQPoZ8=
Subject key identifier: A6:12:12:C8:84:0D:50:B6:E4:C2:8B:20:BC:CF:DB:FA:3A:8A:C5:79
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 019893DAABCB3CF93E95BDBAE1AAD9522B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 10AC
Signing time: Sun 10 Aug 2025 12:00:38 +0000
Manifest this update: Sun 10 Aug 2025 12:00:38 +0000
Manifest next update: Mon 11 Aug 2025 12:00:38 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: njgGYCuriK018uyBL6ZxL2zFcrOxV8JBmm4oXDoVlfQ=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:ab:cb:3c:f9:3e:95:bd:ba:e1:aa:d9:52:2b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Aug 10 12:00:38 2025 GMT
Not After : Aug 11 12:00:38 2025 GMT
Subject: CN=a61212c8840d50b6e4c28b20bccfdbfa3a8ac579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:bd:a4:c0:55:96:9b:ef:57:60:3a:94:33:
4b:bf:52:ba:d1:3e:cd:33:fa:1d:3d:80:31:e0:c2:
66:c2:f7:b7:d7:d8:ed:f8:72:15:5c:01:ed:db:f1:
a0:43:cd:15:39:05:02:fc:f9:dc:cd:40:22:2b:b0:
65:a1:6a:ce:98:04:43:d7:9e:85:00:dd:95:68:43:
67:6b:84:e1:87:ba:fd:6f:c5:df:63:01:b1:d2:ab:
d0:28:a4:ee:02:af:97:8e:69:9b:44:c5:fe:71:70:
ce:47:f1:1e:0c:6e:00:2a:fd:a9:cb:e2:ee:d1:c3:
47:12:21:d6:78:4d:a0:7d:b7:53:c6:e4:88:c2:25:
12:cf:e0:b6:de:cf:27:4a:10:07:4d:5b:04:d7:19:
4e:3d:75:1a:73:51:c7:78:0d:a8:f3:ca:85:41:a3:
33:8c:f0:d4:70:6e:80:40:ff:c8:3c:1b:bb:a7:1e:
0a:87:8f:4c:c4:fc:1e:49:c4:4c:39:a7:f6:1d:34:
99:2e:b6:f1:43:cb:e1:c0:8b:43:51:f4:ca:20:91:
f8:45:8b:2d:8f:e3:a8:dc:53:71:e4:e6:7a:19:1c:
fc:93:bf:c4:34:29:67:46:32:e0:f0:31:61:f5:2b:
4b:9c:ac:fb:69:12:f4:07:ae:5d:f8:1f:43:9b:c4:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:12:C8:84:0D:50:B6:E4:C2:8B:20:BC:CF:DB:FA:3A:8A:C5:79
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b8:cf:f6:eb:0d:ef:9e:db:55:68:16:f0:6f:1c:ea:bd:8b:
d8:d7:3f:9b:a4:db:b2:8a:4f:58:38:5f:06:13:2c:81:5f:29:
ad:e1:da:e2:51:57:d4:61:b7:49:b0:94:74:02:bf:df:ce:bb:
0c:13:c4:4b:df:31:5b:b3:d1:e7:ed:17:0e:7b:bc:54:72:c9:
08:a1:63:b5:41:7f:1b:6b:71:f4:1a:07:f0:e3:1c:58:7f:fa:
20:3d:61:00:f5:55:a0:7b:46:07:d0:4d:95:df:f4:d5:8d:47:
9e:60:46:00:bc:3a:85:1a:7e:a6:34:5c:31:53:de:35:2b:84:
39:26:59:08:41:09:0a:07:1c:d5:29:da:da:d6:6e:48:2f:9d:
e6:da:5f:e8:11:5f:30:98:d7:c5:6a:2c:af:39:25:a9:8c:e5:
1f:6a:8d:a1:c3:ff:b9:ba:8a:ec:ed:17:e8:8a:dc:22:d6:4b:
9c:d1:85:b7:eb:ea:21:8a:ae:40:2a:d0:a6:af:20:5e:19:e9:
e9:e1:c9:a6:d0:50:a6:71:d8:e4:b8:2e:75:92:4e:57:28:e9:
40:e7:c0:f6:c8:34:73:30:0c:79:46:2e:ef:9f:50:4f:97:23:
3c:5b:23:f4:92:0d:f1:d2:4c:63:da:ee:a4:3f:34:61:08:29:
9a:b7:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:12:11 2025 by rpki-client