Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: ZWyWnbqp00++fqi04Zcu2gUZqXJpCgwwJfboz1QtUZI=
Subject key identifier: 8E:D8:21:26:6D:74:C0:D7:67:38:24:8D:82:8C:E3:EB:97:FA:9C:7E
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 0198793FB7919A7FCE98F15486698FF6415C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 08:01:15 +0000
Manifest this update: Tue 05 Aug 2025 08:01:15 +0000
Manifest next update: Wed 06 Aug 2025 08:01:15 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: c78PjtOL2mFSXx03Fuz1PqOsz8zkHNzSnHWVMjeT1hY=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:b7:91:9a:7f:ce:98:f1:54:86:69:8f:f6:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Aug 5 08:01:15 2025 GMT
Not After : Aug 6 08:01:15 2025 GMT
Subject: CN=8ed821266d74c0d76738248d828ce3eb97fa9c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:9e:f0:5a:84:4f:f9:d3:8e:47:d8:3e:76:
65:e5:78:6e:d9:75:3b:3d:31:53:31:e3:9a:e6:96:
35:11:ea:b4:11:5b:84:fb:c2:e3:2b:05:63:03:65:
e2:d6:a6:93:1f:5a:d6:c2:ab:66:e9:ed:c6:3d:c1:
a7:1a:8f:2d:1c:8d:2e:34:88:ca:84:e4:0d:41:e6:
7f:6a:7b:ff:46:11:a0:f7:08:84:93:22:dc:9d:f2:
f9:9f:6a:56:66:f2:cf:06:6d:44:91:08:25:a0:87:
a0:63:15:7e:a3:39:5f:e7:36:c4:c7:f6:f1:d4:43:
91:c5:90:13:c8:cc:11:af:7e:04:aa:b2:a3:4e:f5:
00:9c:0a:88:e7:7e:a8:0b:f0:c6:69:1d:0e:36:26:
4f:ab:84:4d:1a:18:9f:89:1b:82:cd:ad:3e:bc:43:
65:8d:85:59:9f:45:b8:3f:c6:55:ea:c0:19:9d:b3:
0c:ac:71:c2:49:ef:61:9e:62:f2:04:5f:c6:79:ea:
5a:00:c4:f7:ae:75:50:7d:3f:4f:95:a8:0a:a6:e0:
ed:c1:af:4b:ba:07:c1:ce:a3:06:18:d5:03:db:0f:
b0:4e:dc:cd:86:f2:e1:a1:2c:c6:6d:12:7c:74:e9:
9c:66:d6:ff:0a:d2:4a:60:fc:9f:79:73:38:85:96:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D8:21:26:6D:74:C0:D7:67:38:24:8D:82:8C:E3:EB:97:FA:9C:7E
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:85:55:f6:6a:08:b5:65:29:7c:b6:98:b9:d3:65:69:cb:
cb:8e:64:24:c7:b2:f0:9b:dc:74:83:9c:38:ca:e1:a1:4d:31:
6e:3e:4e:43:f8:27:74:99:35:15:9a:07:66:10:c4:4b:b3:1e:
77:12:ab:40:8c:1d:60:17:cf:05:c2:ab:f1:33:8a:bb:85:a6:
38:e2:5f:42:c0:87:14:95:55:69:42:2e:78:e9:5e:56:a4:36:
60:f0:46:27:b5:be:f5:b2:ed:8a:54:d8:3f:06:d2:02:3f:1e:
88:67:43:92:39:ce:80:68:fb:c9:42:06:50:38:5f:1d:cd:f5:
b9:e7:67:35:ee:4f:42:77:82:b4:96:b2:02:ff:5c:22:2b:96:
3f:9c:a5:bd:18:99:f4:92:dc:92:ad:bf:65:e6:35:7b:35:22:
63:9c:fc:64:8c:53:a6:a8:0c:45:ab:ad:c2:6d:05:02:b8:ef:
30:cd:d9:e2:dc:2a:76:93:02:c3:a2:8d:56:e4:cf:8e:a5:d7:
4c:ac:7b:7b:3d:8f:0c:e1:36:98:20:81:d3:be:b2:77:eb:55:
c3:37:a0:6d:41:ac:cb:ba:20:3c:10:6b:f3:36:41:95:97:b6:
e6:ab:55:7b:ea:8e:bf:4a:92:13:f8:d9:fd:f5:eb:be:84:61:
ec:68:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:33 2025 by rpki-client