Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: w5we9XBD8RKDwzmcaZcLm3SOHQk52+6r3XYiMaPimDQ=
Subject key identifier: 5D:85:11:20:A1:84:8B:CE:3F:9C:49:67:E9:FD:1F:62:12:83:5B:7F
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 01988E7DA4C9C5EB6F8280E1851A6045A824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 05DE
Signing time: Sat 09 Aug 2025 11:00:55 +0000
Manifest this update: Sat 09 Aug 2025 11:00:55 +0000
Manifest next update: Sun 10 Aug 2025 11:00:55 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: OL1eYPfrpxIQH1dQ6fQv5oIz+YDaH5gF7Ojumy5ioKQ=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:a4:c9:c5:eb:6f:82:80:e1:85:1a:60:45:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Aug 9 11:00:55 2025 GMT
Not After : Aug 10 11:00:55 2025 GMT
Subject: CN=5d851120a1848bce3f9c4967e9fd1f6212835b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:d2:5b:f4:d9:9c:a5:b6:33:94:23:83:95:
f7:69:15:12:6b:f3:53:03:91:b9:7c:5a:25:08:34:
88:42:a8:58:b6:6d:a8:9f:94:26:6d:c2:4d:0f:2b:
e7:2d:2b:f1:14:ce:18:3a:9d:cd:a5:74:a0:19:40:
f2:94:ef:66:e5:6e:7a:8b:17:22:e5:2f:e1:fc:98:
53:57:87:b4:2f:fa:d7:6a:1a:d2:e4:e4:70:2d:39:
2a:8f:d6:92:15:f7:33:59:f1:69:f7:2b:9c:e8:6c:
18:a6:7f:1a:52:00:6c:9e:35:28:86:92:2b:8e:15:
1c:66:67:31:88:2a:86:e4:4d:1b:b1:6b:5b:b2:48:
9e:73:66:5d:a7:15:bb:86:c4:47:25:6f:7e:91:e8:
42:38:94:47:9b:7d:c1:1c:48:75:2f:84:8c:a8:04:
bc:60:4a:ae:3a:6d:4d:ee:7e:b7:46:c9:42:28:ce:
05:08:ec:b2:6e:0d:2c:08:dc:4b:35:a0:6f:f2:d7:
c3:d5:21:31:77:93:f8:a7:e3:27:d0:40:d9:99:0a:
15:6c:ce:9b:f2:48:23:29:f7:84:70:8d:e2:1e:73:
43:6f:ca:79:d7:f2:4e:43:06:ca:53:de:b3:6e:93:
8e:6d:c0:da:fa:5c:89:d5:74:65:01:93:fd:40:24:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:11:20:A1:84:8B:CE:3F:9C:49:67:E9:FD:1F:62:12:83:5B:7F
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:ab:03:88:0b:35:99:fc:68:7f:7c:36:58:0f:ce:38:d6:
cb:d0:7f:03:93:6d:8a:04:26:13:16:7f:b9:ab:0f:40:39:4d:
2e:9d:c5:8a:3b:b0:93:90:7c:5f:7e:19:69:90:d0:6c:c8:22:
31:f3:76:34:74:6a:d8:c8:70:d4:e1:6c:e7:c0:32:ff:14:3f:
27:19:12:4d:83:0c:2d:b9:8d:9b:4c:65:7c:73:d7:fb:78:fe:
a1:e8:d8:ed:1a:9b:55:8d:c1:84:b1:e4:3d:c2:9f:28:30:d0:
67:13:9c:a8:ab:f2:c5:3e:2e:26:30:06:bd:1a:74:56:63:cd:
55:9f:0f:22:4c:4e:9b:84:e7:20:ac:28:bf:c8:7f:7f:42:f0:
f8:be:cd:38:20:49:03:69:59:46:7b:95:75:54:26:70:4b:71:
9c:0d:5c:4d:0e:ee:0b:62:75:60:7a:10:2d:99:6a:da:a2:01:
94:d8:a2:42:53:4a:72:0d:75:3c:95:d3:ab:68:15:a5:6b:bb:
a6:09:b4:c9:8c:a7:c2:40:c8:e6:17:c5:a9:44:bd:2e:33:98:
29:8c:2d:98:b2:90:91:81:69:f1:28:b6:5e:dc:19:30:49:dc:
b4:41:d4:51:91:db:76:59:1d:6e:bb:29:4f:d3:f9:6b:81:1f:
1e:af:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:24 2025 by rpki-client