Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: fpcZfdbM/yn0hwTog33WjNwIPtFWNbjNLDcYYX41/6s=
Subject key identifier: 70:72:E4:E7:D1:94:8D:80:2B:92:76:80:5F:13:B1:3F:F9:E5:2C:23
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 01987DC13BC7FBD1120790A8C4A75A4B6D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1448
Signing time: Wed 06 Aug 2025 05:01:12 +0000
Manifest this update: Wed 06 Aug 2025 05:01:12 +0000
Manifest next update: Thu 07 Aug 2025 05:01:12 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: 04ShMXudpwbIrEebo20zY1jUFdVhJMcy0d9AAM8dW98=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:3b:c7:fb:d1:12:07:90:a8:c4:a7:5a:4b:6d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Aug 6 05:01:12 2025 GMT
Not After : Aug 7 05:01:12 2025 GMT
Subject: CN=7072e4e7d1948d802b9276805f13b13ff9e52c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:99:aa:92:aa:a8:24:42:16:4e:62:c2:45:
c9:13:9d:c7:63:d1:b6:f2:fc:63:ee:47:5a:eb:68:
66:fd:52:d3:9a:4c:bb:0b:48:39:67:37:81:eb:95:
43:c4:17:83:b7:52:0e:34:64:ef:79:82:1c:32:a2:
a5:18:97:9e:4f:93:6d:29:28:c9:8e:66:a8:9c:be:
fd:65:c4:60:0e:d6:2d:81:36:b2:d2:70:db:8d:6b:
60:b6:d4:7d:f6:fc:84:03:f4:2e:d7:77:70:ec:ea:
da:2a:86:8e:4f:a8:30:8f:13:37:b7:0d:6b:60:f6:
4f:a7:87:37:fa:a4:64:b1:52:78:90:56:f4:89:71:
6d:f9:c5:78:42:64:b1:f0:19:ea:77:b8:5a:7f:89:
76:a0:2c:0c:80:89:a6:b9:89:c4:e7:c9:e0:ec:ae:
45:cd:e6:02:18:21:eb:da:e5:bf:d3:f4:c7:52:dd:
c6:10:69:31:68:25:20:c8:ca:ed:70:d7:e8:a2:bd:
dd:ef:90:b9:5e:29:c4:c5:43:d3:9c:80:ef:f6:f3:
74:a0:92:ab:88:c6:49:ea:4f:f4:ed:57:ea:ef:d1:
07:a2:aa:05:10:53:a0:e9:bf:cb:de:e2:db:5a:ed:
6d:bf:5b:00:d0:d3:9c:3c:8a:12:e1:2d:e2:5a:97:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:E4:E7:D1:94:8D:80:2B:92:76:80:5F:13:B1:3F:F9:E5:2C:23
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:cc:3a:1d:c0:e2:93:2d:c3:d6:0d:47:87:5a:5c:01:f0:
bb:ca:d7:6e:c3:0b:47:63:0f:97:4b:ac:a8:31:3c:42:ad:32:
a9:1b:87:d0:00:6a:5b:16:28:7a:77:d0:72:36:fd:4a:c0:38:
77:24:e7:df:63:41:c0:0f:57:ff:ac:71:bb:b3:32:6c:d2:7d:
98:fc:73:76:e2:68:96:a0:5d:35:cb:07:71:08:05:62:03:56:
36:55:76:89:44:ea:13:bf:a2:1d:91:37:86:89:d7:b4:7a:dd:
bb:2d:82:fb:66:26:e6:d2:32:f9:fe:cf:0e:4c:b2:86:1f:0d:
13:d3:a4:a0:2a:3c:77:a4:76:18:e0:f0:f0:a8:b3:20:04:ad:
3d:52:e1:b8:7a:f6:37:4f:5f:d6:bb:a5:d4:d2:bf:d2:db:6c:
9b:02:fd:1f:e0:b4:e9:f9:d7:93:b7:c7:50:13:8d:38:c3:89:
7b:c7:17:0b:cf:4f:04:2d:2a:2c:ce:d0:c4:f4:91:f2:4c:55:
fa:6a:10:8f:be:1b:92:2e:4c:90:5c:65:e3:46:33:85:a9:c3:
3d:67:73:5b:69:fd:01:38:44:fb:82:ba:7c:51:3c:2b:bf:f5:
c1:bf:c2:7b:d1:e9:a8:13:d1:be:43:ff:c5:8d:c4:dc:44:0d:
c2:62:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:10 2025 by rpki-client