
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: 0hZMIHOG9oygeyV4isVAxrrEktAt6vuPKL0FliyJ91Q=
Subject key identifier: DE:2D:EB:6C:8F:3C:AC:F8:71:90:8E:F4:91:6A:75:5F:7B:89:1C:8E
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 01987CAE0E7EF866F9BFF1B3250C8BD367DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 162C
Signing time: Wed 06 Aug 2025 00:00:38 +0000
Manifest this update: Wed 06 Aug 2025 00:00:38 +0000
Manifest next update: Thu 07 Aug 2025 00:00:38 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: skup/kgIHxEf5yViCmFbN4IKX/q4rOMmTl5YxsdciCE=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:0e:7e:f8:66:f9:bf:f1:b3:25:0c:8b:d3:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Aug 6 00:00:38 2025 GMT
Not After : Aug 7 00:00:38 2025 GMT
Subject: CN=de2deb6c8f3cacf871908ef4916a755f7b891c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:22:5a:70:71:19:7b:ef:1a:6d:38:f7:46:
c6:ec:82:78:c1:95:f9:76:e3:75:36:3b:96:c5:d0:
1b:81:30:e1:d1:e0:77:a4:fd:59:59:d7:52:16:f0:
27:fc:9b:1f:3e:87:34:dc:1c:23:52:c1:45:81:71:
d1:73:58:50:5b:b4:4c:0f:9e:c4:21:c1:10:54:e8:
97:0a:9a:36:a9:58:94:40:36:2e:13:d2:8f:aa:b9:
d4:a9:e5:4e:bf:07:f5:2e:db:31:61:93:ad:ee:56:
f8:45:62:89:64:12:53:52:0d:28:14:6d:93:36:92:
f0:f6:91:4a:1f:d7:3f:b3:8e:39:b8:c5:4c:7c:5a:
49:cc:81:94:c1:af:d5:8d:98:68:0a:cb:78:a0:4e:
d4:7f:4f:4c:f0:c8:49:96:62:d2:99:45:fa:f0:df:
c8:6d:93:bf:a0:2d:40:b7:14:77:2c:66:95:b4:fd:
46:3e:2c:5d:14:9d:8f:cf:ae:f3:c0:11:9f:bb:d4:
a2:f0:ee:fa:7f:4f:78:df:5d:c9:3f:d2:18:b7:1c:
cf:06:18:34:8d:5f:c1:79:f9:21:e9:b6:89:99:5c:
19:c9:73:98:53:92:16:42:a5:93:b9:a7:51:b9:cd:
2b:a3:e5:51:9b:cb:e1:c7:9f:0c:48:74:9c:a5:31:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:EB:6C:8F:3C:AC:F8:71:90:8E:F4:91:6A:75:5F:7B:89:1C:8E
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:19:4a:e8:f1:61:f5:89:72:71:46:50:2e:7a:76:01:52:
b9:19:d0:aa:78:ba:79:93:59:2a:d9:11:af:69:30:79:bf:77:
88:27:f4:9e:76:00:cc:59:dc:61:1d:24:c6:fa:fc:39:21:81:
f5:81:7d:e1:c8:d3:87:5c:45:59:84:88:26:ad:c5:67:50:49:
e0:09:21:a7:39:eb:e6:80:f7:88:fb:34:35:c6:89:dd:1b:ba:
cf:a2:e4:4a:9a:82:ac:d0:bb:4a:52:f1:63:6f:2a:04:b4:9b:
c9:c4:45:88:a1:78:97:4a:37:08:8e:97:c2:b5:af:dd:c9:bb:
65:12:41:dc:fc:ac:85:c8:f3:9a:06:72:3f:95:32:86:d9:1e:
77:68:3c:9c:e0:39:83:2f:89:64:b5:ed:7e:0d:61:4b:da:ca:
bd:81:e0:ca:c4:08:a3:2e:9a:62:69:5b:8d:1c:89:51:83:82:
3e:c3:18:c3:25:d5:b5:04:5a:8d:d4:a3:f1:79:81:0e:b7:15:
83:ad:0b:ad:e6:07:8f:c5:29:b5:e9:a4:6e:89:e2:91:04:e2:
35:e6:98:95:f0:c0:8c:12:a0:c0:48:a6:e5:d2:42:4e:a8:35:
1b:86:c5:44:4d:d8:94:10:a3:52:00:27:f9:93:5d:46:d3:1e:
52:98:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:26 2025 by rpki-client