Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: ztc63NgcbLNi9DR4GvCnLfjcmLGKYpXCSYsSCXyXsik=
Subject key identifier: F7:86:79:51:DD:5B:EB:2B:F1:6C:6D:F3:3A:58:46:2E:BB:29:B7:6B
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 019872CFC0EE3A4BFCD9C6CC830E36C68A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 09AE
Signing time: Mon 04 Aug 2025 02:01:14 +0000
Manifest this update: Mon 04 Aug 2025 02:01:14 +0000
Manifest next update: Tue 05 Aug 2025 02:01:14 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: ZbjQTKQcYgfGfLALrUdTDbfiKNY6h4CAllEZDRihbYk=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:c0:ee:3a:4b:fc:d9:c6:cc:83:0e:36:c6:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Aug 4 02:01:14 2025 GMT
Not After : Aug 5 02:01:14 2025 GMT
Subject: CN=f7867951dd5beb2bf16c6df33a58462ebb29b76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:39:c1:25:8b:e2:c3:60:f1:0b:7d:c2:9d:
4e:7b:7d:1e:69:27:90:5a:52:66:8d:2e:fa:4c:6a:
df:0d:66:3c:71:14:c0:bc:41:3c:6a:02:93:57:1b:
1e:b8:f9:ad:f5:3f:5e:76:57:40:c4:cb:aa:03:bd:
7f:6b:08:2a:00:9a:b0:d1:29:e2:30:3b:19:a8:c5:
b3:27:f9:e0:59:8a:f0:b7:29:86:0e:12:4e:50:f7:
3c:de:f8:71:fd:41:b5:cd:b7:e1:8d:1e:79:e5:40:
4f:90:30:a9:de:20:9a:2b:a2:43:03:c8:28:e8:4a:
64:48:82:d9:d6:58:c6:4e:75:ff:51:8c:7e:dd:c8:
27:74:7e:b4:13:0f:74:05:e6:10:7a:2a:7a:1d:3a:
f3:ea:86:8e:ac:38:a7:b1:43:7c:2d:90:b3:4e:2e:
60:f7:e0:73:17:aa:de:cf:93:9d:45:d3:ee:f2:16:
ba:e5:55:b8:ab:6c:6a:63:a3:ab:e9:f1:32:e7:ba:
c7:67:5c:f8:d0:cf:f1:e3:12:db:fe:99:ad:f2:dd:
a5:c5:c1:47:cb:58:25:f3:f0:a4:bd:a7:ef:03:b2:
e9:a6:48:e5:84:55:d5:73:59:bb:6f:00:b1:b3:12:
5c:e8:32:d4:4d:b7:ac:7b:02:22:5c:29:19:af:47:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:79:51:DD:5B:EB:2B:F1:6C:6D:F3:3A:58:46:2E:BB:29:B7:6B
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:44:19:6a:71:94:e4:fe:2a:a5:0b:32:d7:cb:4f:a4:22:
dd:27:a0:1c:51:da:77:cc:2a:fc:76:fe:f9:7d:a1:4f:68:f1:
9c:b9:c2:2c:6f:b2:8a:a4:1a:02:30:69:b7:dd:94:07:52:c5:
ee:2b:70:44:e7:09:37:f7:9b:92:95:0c:cd:84:f1:c0:0c:f1:
70:7d:39:d4:09:ae:b0:79:81:e0:cc:ff:40:43:4c:4e:c8:c3:
d3:8e:58:b7:41:67:e6:24:54:ce:fe:b6:5f:1a:e7:7c:af:9f:
6d:d4:17:17:48:82:eb:4f:55:a9:6e:9f:01:92:9a:f5:4e:0d:
15:3f:00:cb:9a:84:90:2a:41:7a:bf:a6:3a:fc:7e:30:21:8c:
6a:bf:51:e2:e5:e5:40:b7:11:73:ab:64:5a:53:9e:7b:b6:52:
5a:e4:84:8d:06:27:d6:ed:09:15:4c:c7:e9:ca:3e:61:dc:27:
b1:75:b9:54:6d:85:b7:19:a4:6b:40:ac:3f:3d:ec:da:fa:02:
80:e1:c5:a4:3a:fb:5c:07:0f:dd:6d:be:b9:89:70:34:a3:63:
26:1b:a7:4f:f0:d8:53:31:e5:73:d0:0e:33:53:a9:93:ad:e0:
9a:81:76:58:82:43:4e:ca:21:80:e4:4c:d6:80:5b:51:21:6e:
98:d8:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:47 2025 by rpki-client