Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: wOzPot2JVV/xP0FYf6JHfioC4WPGJA9q51HunBPeq54=
Subject key identifier: 6B:AA:CC:CE:84:C9:C7:8C:AD:95:83:54:E7:E4:9F:C0:7C:53:C0:74
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 01987BD2C1A5E0FE8537B1EEA70014AF912E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 12F5
Signing time: Tue 05 Aug 2025 20:01:06 +0000
Manifest this update: Tue 05 Aug 2025 20:01:06 +0000
Manifest next update: Wed 06 Aug 2025 20:01:06 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: xITf7CRFBZXuGTBoStDLxVIic3deXoE1AELt3ydPqB4=)
2: dpj-gbwzbz00wBAZxRLu2JRmudE.roa (hash: ZvHTjTrZScF3pxyYvHGxOD3c/TPO+OkBRoCVWJ9HqnA=)
3: gvC7ao5sxrnrTpKAU7Z6Kxl3n4w.roa (hash: 6Il2DCAKJW2GDXUMq30h38NoaFgqqtmGFfPCqtO+DUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:c1:a5:e0:fe:85:37:b1:ee:a7:00:14:af:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Aug 5 20:01:06 2025 GMT
Not After : Aug 6 20:01:06 2025 GMT
Subject: CN=6baaccce84c9c78cad958354e7e49fc07c53c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:78:e4:9b:e3:e0:86:a2:1a:be:b3:50:63:
cb:e8:9a:34:76:71:bf:3e:98:2f:bf:3f:c1:df:a1:
a7:be:7b:85:40:e0:d5:3b:7d:d1:1e:c5:29:9b:6f:
bb:68:ff:c6:4b:f4:44:62:7d:5e:4b:56:72:e5:94:
f5:93:bb:f4:f6:03:33:29:c7:df:8c:f7:52:d1:bd:
07:a6:32:b7:5e:1f:16:61:64:c8:22:76:2d:98:08:
b5:f6:5a:74:51:35:1b:71:c0:26:b9:c6:47:76:f6:
78:ed:29:41:c1:8e:7b:f0:5c:fa:12:61:a9:9a:ca:
cf:53:be:5f:dd:b6:5e:69:20:ce:cd:4a:dc:76:5c:
1a:b4:2e:25:1d:0e:fd:58:aa:ea:b9:43:b4:78:8d:
3c:b5:a4:06:50:b2:ef:53:d5:ad:4a:cd:ce:98:c8:
09:46:08:a2:a2:56:45:71:20:cf:28:4f:c7:c1:e7:
2d:7d:d7:1c:de:fc:81:ba:54:9b:bd:35:23:55:6b:
f6:f1:1c:1a:e1:b2:9c:d6:06:09:dc:e9:d7:0b:22:
72:0c:ae:51:1b:b3:e9:cb:cf:5a:e7:80:0b:ce:4c:
d3:e1:f1:4f:b7:3c:c1:b3:5c:d9:8c:93:7e:98:0e:
58:75:5e:b3:cb:18:04:6a:3b:f0:a5:65:d9:b2:b2:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:CC:CE:84:C9:C7:8C:AD:95:83:54:E7:E4:9F:C0:7C:53:C0:74
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:4c:7a:34:96:29:ec:e5:85:df:ce:ed:90:64:44:d8:a9:
e6:5b:d5:50:8f:99:6a:37:f8:b3:4c:0e:9d:0c:6e:92:84:8b:
3e:c1:79:e7:50:a3:c0:6b:d8:b1:c0:41:d2:b0:1e:a9:c3:d0:
ae:a3:e8:7d:6a:7e:11:2c:c5:81:c6:1f:30:cc:16:5a:c6:09:
25:b9:53:b8:b7:55:1b:19:9a:b2:3d:a1:e1:ca:b9:16:46:b9:
72:5a:65:d5:33:67:cf:5b:7f:42:25:35:32:6d:86:95:1d:e6:
1b:ec:d7:b7:de:c0:ec:53:8e:e8:5f:bb:fa:55:ea:f0:b4:41:
e4:c5:69:1d:67:c7:8a:05:84:c4:57:fc:e5:b9:cf:f5:75:30:
a1:39:53:02:d0:f3:f7:07:bb:a7:c1:48:41:32:fa:81:1d:73:
40:20:02:08:3c:37:ce:44:e0:cb:8e:3b:53:a1:ff:da:81:aa:
1f:b5:e3:cf:49:3f:97:2b:31:76:a4:24:dc:d3:55:13:e7:e7:
a2:19:6e:a9:42:3a:9f:81:a0:ae:01:75:11:04:0e:75:a6:99:
fc:7b:b9:ad:01:fc:54:1b:7e:b7:d3:90:8c:e7:c6:7c:ff:27:
ff:e6:e0:95:ce:3b:64:fe:b3:3b:ae:9d:55:b0:1b:4b:2e:25:
23:64:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:02 2025 by rpki-client