Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
File: 5FudrqoDQlXqMxFPWLiMHD48fK8.mft (raw, json)
Hash identifier: wXtljU4QaqygBxFjivUxYwA2ZGN7uBZACPFjzsR7ukQ=
Subject key identifier: 0D:B6:62:59:FF:08:80:A1:5E:6A:B7:3B:05:E0:C5:BD:01:9D:5D:A8
Authority key identifier: E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
Certificate issuer: /CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Certificate serial: 019892FF6EB4A63E0A67565FA97589EB8831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
Manifest number: 0D72
Signing time: Sun 10 Aug 2025 08:01:10 +0000
Manifest this update: Sun 10 Aug 2025 08:01:10 +0000
Manifest next update: Mon 11 Aug 2025 08:01:10 +0000
Files and hashes: 1: 5FudrqoDQlXqMxFPWLiMHD48fK8.crl (hash: IJKAoMgNEr08NYV9QG1leycSWAparhQHOts0XV906u8=)
2: GzZOn0FMwyF0PqvIWI6Nnb-Vd4g.roa (hash: 5J/Uh3Vu4lMEWtHw6mjugw4/PpXu0iZuwIZUgCw3aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:6e:b4:a6:3e:0a:67:56:5f:a9:75:89:eb:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45b9daeaa034255ea33114f58b88c1c3e3c7caf
Validity
Not Before: Aug 10 08:01:10 2025 GMT
Not After : Aug 11 08:01:10 2025 GMT
Subject: CN=0db66259ff0880a15e6ab73b05e0c5bd019d5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:a0:4b:b6:4a:1c:8f:d6:88:12:e2:a1:44:
a0:d0:81:ac:58:8e:d4:81:e0:a7:f4:ec:ba:14:9b:
e6:45:3c:83:40:70:7c:1f:66:47:86:be:37:bc:e2:
f0:7d:aa:36:55:d3:78:16:c3:13:43:57:4c:ed:c7:
70:12:ba:5c:c7:e5:3d:dc:22:97:83:8f:c7:db:ef:
f0:c3:b3:1e:9c:9c:ef:25:0f:27:e8:96:6a:84:ce:
ee:fe:2f:45:77:5f:d3:9d:28:7d:da:9d:37:f2:9a:
b1:91:1c:09:10:be:b7:07:18:fe:69:8b:61:7f:23:
1c:86:f5:c7:16:a5:3b:03:fc:ce:f0:2d:c5:e6:55:
44:a2:d4:d8:5f:53:26:15:63:98:55:be:52:5f:c2:
c2:de:40:3b:bd:80:f4:e9:e5:66:12:bd:8a:aa:60:
1f:51:5f:60:49:af:de:96:bc:64:75:87:06:fe:87:
5c:75:e1:9a:97:5b:c1:3a:84:7f:f7:74:0d:66:59:
7c:c6:4c:f7:dd:4a:9a:9c:8f:f7:33:29:db:91:ef:
eb:e1:dd:d9:6f:cf:c6:72:7e:18:65:5e:cb:93:a4:
e6:15:54:b1:2a:b2:37:49:98:9c:bc:e2:81:39:0f:
77:64:50:0c:67:e1:69:91:6d:b6:96:d5:b0:24:f7:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:62:59:FF:08:80:A1:5E:6A:B7:3B:05:E0:C5:BD:01:9D:5D:A8
X509v3 Authority Key Identifier:
keyid:E4:5B:9D:AE:AA:03:42:55:EA:33:11:4F:58:B8:8C:1C:3E:3C:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5FudrqoDQlXqMxFPWLiMHD48fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d6b88-20c6-4c42-8799-4b917592357c/1/5FudrqoDQlXqMxFPWLiMHD48fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:71:74:18:f2:df:08:15:5d:f1:93:6f:48:90:9e:38:8c:37:
76:35:10:15:7c:e2:d0:36:46:eb:65:35:84:04:3d:0f:a1:45:
75:5b:b2:24:78:05:77:5e:c7:3e:40:06:59:80:dc:67:52:54:
cc:25:fb:31:cd:33:c9:ee:86:df:5c:18:0d:14:20:f3:c0:35:
ed:61:31:c4:30:60:94:6e:f3:f4:5e:9a:4e:53:d9:aa:e2:35:
61:4f:a7:82:75:6a:e8:15:6b:c2:6d:53:42:df:f5:73:7a:3e:
32:bf:d7:5d:7c:2c:f2:6d:88:4b:85:6d:03:f5:3b:5f:ab:6f:
dc:c9:d0:46:0c:f0:65:df:af:f0:3a:aa:36:de:6a:d5:2a:67:
5d:26:6f:c6:da:88:c4:a6:af:70:cb:a1:44:2a:09:b3:58:95:
3a:9f:2d:10:c8:e2:f4:1f:22:d5:00:84:ec:2a:b9:98:d7:17:
52:08:8c:07:d4:39:62:3f:a4:e8:75:9d:7c:f0:45:90:14:c8:
85:89:05:be:53:26:58:c9:fc:fa:2a:f3:1e:80:07:af:eb:cf:
50:d8:22:ff:1c:98:09:79:3a:22:59:1e:e0:c5:e1:6b:77:cb:
9e:b8:c8:62:34:5f:7f:62:88:47:ba:c3:10:b0:ad:e2:0e:7e:
b3:8c:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:30 2025 by rpki-client