Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: NCeXT4weVoz0fMD6qLwVPQx2gkLPGBhDMajDQh2g6fo=
Subject key identifier: D6:45:E7:D9:66:68:A9:1C:33:8F:5E:E7:A7:78:A0:96:F9:15:E7:9E
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 019894B880ED6E27C2859C5850F0C90FFDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:02:56 +0000
Manifest this update: Sun 10 Aug 2025 16:02:56 +0000
Manifest next update: Mon 11 Aug 2025 16:02:56 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: ovudeaIBDDSocqWqjubWIToo2Ifxhr4fBuiJkW7N66g=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:80:ed:6e:27:c2:85:9c:58:50:f0:c9:0f:fd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Aug 10 16:02:56 2025 GMT
Not After : Aug 11 16:02:56 2025 GMT
Subject: CN=d645e7d96668a91c338f5ee7a778a096f915e79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:8a:69:fa:16:b1:16:46:67:dc:36:cf:18:
19:f5:a2:d1:7b:1e:ee:e7:50:da:20:bc:07:6d:d1:
41:e8:79:78:40:7e:1c:1d:cd:a2:60:fa:12:3c:72:
81:dc:dc:80:d8:05:77:02:94:e1:7d:37:e3:73:d1:
36:d8:1d:81:8b:db:36:51:f0:cb:3e:40:e9:d1:b6:
6a:b1:fb:4a:52:68:e8:d0:3d:51:ff:87:ea:32:90:
e6:2f:5b:1f:f8:36:0f:6f:53:8d:b5:ad:37:ee:32:
82:fb:fc:60:86:46:13:44:83:72:48:1f:68:75:67:
5c:22:3b:ba:d6:67:6c:49:2d:00:5d:a5:21:22:3b:
82:4b:70:13:ed:06:55:7e:98:23:2d:24:9a:1f:32:
4c:58:ca:44:6d:7a:93:aa:73:e5:65:7f:9d:8c:f1:
94:92:44:aa:a5:3e:7b:c8:8f:96:f5:d9:c7:21:76:
58:29:0c:fc:cf:1d:fb:c4:b0:96:c4:e8:7f:04:f2:
b4:b6:a2:b2:e5:b5:5c:c6:e7:aa:13:5e:5a:af:cd:
2c:24:a2:c5:8a:bf:80:db:06:8e:d5:4d:e5:08:6c:
52:69:26:72:d9:09:ad:03:7f:32:8e:67:3d:90:10:
a9:34:1e:46:8d:01:6a:66:94:24:55:ff:71:22:4f:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:E7:D9:66:68:A9:1C:33:8F:5E:E7:A7:78:A0:96:F9:15:E7:9E
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:ca:97:39:b3:e7:bb:7d:4d:8a:27:c1:e2:6a:84:e4:0f:
fc:8f:43:90:f3:19:41:2c:57:83:b1:bc:04:a9:d2:e4:74:af:
ae:dd:ce:0c:ed:68:8f:1e:32:06:92:9d:de:2a:36:be:35:d2:
47:0b:91:d0:69:d5:83:5c:4f:b6:42:dd:f6:c4:68:b8:6c:aa:
da:e6:50:40:00:db:e9:26:4d:08:55:47:62:0b:55:17:9c:ca:
d6:d1:bc:0a:55:66:c0:22:8a:54:ed:e9:6d:ed:bf:61:14:77:
85:f7:4c:da:0f:6c:80:0f:36:00:11:00:e6:84:26:57:f8:04:
6f:c5:ef:0a:e5:17:2e:34:76:1c:b1:2d:6a:3c:dc:1a:57:de:
70:9b:5d:98:36:f0:a9:d0:7d:94:75:9d:86:19:01:1f:d1:19:
9d:48:92:5c:d4:ec:8f:42:73:fb:a3:2d:fe:d0:c1:d7:4d:51:
e0:7c:ab:62:c0:56:34:34:2c:62:ab:e8:43:29:75:6a:e6:cc:
7d:5b:42:9a:32:a4:74:68:a6:55:f0:49:5d:59:bf:23:9b:eb:
f0:de:63:23:67:c0:14:b5:7d:b9:59:7e:5c:4c:ab:b5:77:95:
66:8c:05:ed:9a:2d:6f:a1:5c:f0:40:4a:42:4e:f4:24:6e:06:
ee:19:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:08 2025 by rpki-client