Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File: 05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier: i6o3WkX92xJ1MVnOjU+KLmvsb4iacM75gnpPrESRaGA=
Subject key identifier: CE:EC:D8:1E:17:AA:90:F1:EB:61:A0:F4:CA:D4:8B:75:84:B8:C7:DD
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial: 01987ABF9F66D4C31A18F06A9FCEB7DA8DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 15:00:35 +0000
Manifest this update: Tue 05 Aug 2025 15:00:35 +0000
Manifest next update: Wed 06 Aug 2025 15:00:35 +0000
Files and hashes: 1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: fplA6jpH8uevOPbKhJp0lWW6bFIzFKcYYaDeXiyn0YM=)
2: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (hash: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:9f:66:d4:c3:1a:18:f0:6a:9f:ce:b7:da:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Validity
Not Before: Aug 5 15:00:35 2025 GMT
Not After : Aug 6 15:00:35 2025 GMT
Subject: CN=ceecd81e17aa90f1eb61a0f4cad48b7584b8c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:55:f3:59:12:2f:2a:b9:66:f4:6e:c5:c6:
7a:90:9f:7d:af:23:2b:33:0a:ed:18:58:57:0d:78:
18:1b:46:f1:ec:57:dc:0f:c9:2f:e8:dc:8c:88:c9:
89:ed:90:26:1a:a2:1e:eb:f9:fe:67:62:c4:64:e9:
b9:b3:7e:7c:c3:ee:49:a6:0c:5c:28:62:b5:17:1c:
17:71:9e:0a:b9:7e:66:ba:a7:f5:66:c7:13:a6:28:
04:53:aa:0c:6d:0b:f3:7c:e7:5f:36:ce:8a:da:dc:
21:e3:98:e0:92:10:fb:20:4f:64:0f:1a:cd:8d:38:
8e:e8:58:78:10:b4:ef:8c:8b:6a:57:fb:dd:63:fd:
b4:4a:7c:58:39:c3:aa:79:a3:bc:71:55:71:ba:de:
7f:69:7e:67:6f:d7:5a:43:ab:52:23:42:85:7a:51:
bd:3c:bd:ef:28:84:25:9a:c5:32:d6:32:7a:6b:f7:
e1:aa:8e:38:cb:3b:e2:0e:59:9e:c4:58:72:88:d0:
ea:19:00:0a:99:5c:af:da:72:e8:c9:b8:5d:6e:dd:
c1:c0:42:c5:ef:e2:ff:f0:ba:45:f6:2d:d6:21:46:
2a:e0:bc:47:23:d9:14:73:e7:3e:0f:c3:5a:65:aa:
15:e2:2e:bb:64:75:0a:14:58:11:fe:86:97:b2:2c:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:D8:1E:17:AA:90:F1:EB:61:A0:F4:CA:D4:8B:75:84:B8:C7:DD
X509v3 Authority Key Identifier:
keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:18:a8:71:3f:11:d0:19:6e:63:fa:b7:0a:e3:79:2e:ec:3f:
0f:15:ee:87:65:07:de:6a:75:d3:d5:ad:64:04:dc:fb:ed:56:
70:be:40:d0:c5:34:6d:10:24:06:a0:14:dc:0c:25:36:4e:df:
4b:9a:7d:b8:92:53:b3:c1:a2:6d:98:2c:aa:91:59:33:4f:65:
5b:9e:58:e3:9e:cc:56:7b:02:cf:4a:57:0b:04:db:64:ad:3a:
df:d2:14:5c:74:9f:d1:eb:f8:ab:7c:7b:60:64:ef:ec:d9:b9:
ae:2f:ab:65:c9:91:a8:7a:73:ae:83:54:a3:46:e5:91:82:b6:
0e:ac:20:c7:83:67:e8:ab:77:6f:2a:6a:c8:6e:00:00:dd:b0:
22:f0:ed:6c:e0:e2:6b:a2:85:91:e9:df:2f:5a:15:0d:6e:b8:
21:40:bf:20:fe:7e:91:79:93:6f:e1:88:c5:8f:a2:2c:75:54:
d6:c0:4e:d3:5e:7c:ab:62:ef:11:6c:74:de:71:3e:36:65:4a:
08:ed:ee:49:4f:5d:a6:40:6e:6d:ef:70:36:77:98:5c:87:2c:
87:b9:87:31:20:67:52:71:d0:98:7a:aa:95:b0:ec:ab:0d:a5:
0b:33:3f:02:0a:dd:e7:7b:b8:02:1a:7d:b9:b8:8f:a4:3f:e2:
35:7f:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:38 2025 by rpki-client