Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: qTZWHy97WXD9y7WWW7iMfq1tp+NMBI5ucdcVJ8s+EEc=
Subject key identifier: 2A:87:A4:45:E8:C8:09:1C:3A:A0:86:64:26:02:5B:B6:3C:BD:E8:30
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 019890DB09CFEF3377D654EC3F80A2AFB0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 0948
Signing time: Sat 09 Aug 2025 22:02:10 +0000
Manifest this update: Sat 09 Aug 2025 22:02:10 +0000
Manifest next update: Sun 10 Aug 2025 22:02:10 +0000
Files and hashes: 1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=)
2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: wXx9Op1vVi2QsWRke40nvbqh5Kpd393TjzUXT5M2iuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:09:cf:ef:33:77:d6:54:ec:3f:80:a2:af:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Aug 9 22:02:10 2025 GMT
Not After : Aug 10 22:02:10 2025 GMT
Subject: CN=2a87a445e8c8091c3aa0866426025bb63cbde830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:77:50:e3:65:3b:42:f9:dd:02:f9:52:6c:
61:7f:b8:4b:b0:e7:eb:fe:45:7f:eb:d0:d4:24:43:
59:7d:23:02:47:13:67:4e:ac:7a:1a:31:6a:4b:40:
10:ae:e1:39:01:8a:8e:45:f9:c5:21:99:f0:64:32:
6a:44:1c:b6:cd:59:63:4c:a2:4c:b6:1b:f0:5c:41:
69:20:e9:80:30:54:8f:8d:83:87:c1:4e:4d:26:61:
02:9c:43:e5:97:fa:fd:ca:64:4f:a1:7d:ae:c5:df:
67:1e:71:d3:fd:63:bc:52:96:94:4c:1c:8e:76:9d:
e2:b2:c9:32:a0:0f:27:5f:c4:04:0c:a5:89:5f:32:
d7:24:19:bb:d1:b5:37:a3:61:a6:b4:7d:7c:d9:ad:
25:b7:63:da:a6:7b:6c:93:8d:be:c5:b4:6b:ed:f2:
4d:4f:88:c9:b7:03:8c:f0:69:b6:52:fb:a5:ef:c5:
0a:cb:6b:21:68:1f:4e:e0:36:92:e6:37:3e:6a:39:
1b:9a:b7:08:1e:50:94:a3:b3:ca:81:68:f1:27:5d:
b7:72:d9:3d:38:d8:e7:a0:5c:60:cd:6e:b5:32:6d:
dc:f9:cf:26:e2:33:7a:fc:68:03:a1:b0:7c:ce:f6:
bf:9f:aa:f9:45:a3:7b:04:60:5b:4c:77:54:95:22:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:A4:45:E8:C8:09:1C:3A:A0:86:64:26:02:5B:B6:3C:BD:E8:30
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e1:f4:94:42:7d:33:d4:62:b7:7d:82:d1:9d:50:0d:a4:9c:
d3:da:08:8c:51:bf:b2:3d:44:de:bb:db:d0:dc:c9:77:5f:dd:
ab:0b:0b:86:f8:a8:88:e8:90:98:35:4c:e0:d5:2e:75:37:ea:
51:c8:f8:13:7b:32:9c:e0:a3:0b:29:cb:85:58:d2:fb:2a:eb:
72:40:f0:d0:e2:c8:43:b7:37:38:95:78:84:81:68:da:96:6b:
ca:aa:49:15:3f:7b:16:b2:ba:37:bc:54:4d:56:48:35:42:04:
8b:6d:2f:e9:d1:96:ad:7a:c5:47:f2:f4:bb:76:17:25:59:9f:
56:e0:dc:aa:95:71:33:55:53:89:bc:b9:0f:b2:68:16:b1:9d:
6d:1b:c9:a4:11:17:02:b6:c3:c7:70:16:25:18:50:03:c6:6b:
43:93:89:bd:12:2b:16:2a:15:d0:f2:4e:ff:13:8b:4f:0d:bf:
30:4e:ad:d4:9c:f4:19:22:6d:58:0e:c5:b6:05:85:01:e8:7f:
02:85:4b:5d:14:9a:d0:46:10:ee:aa:7d:6f:c1:5a:40:c2:be:
b7:ab:76:e6:1a:3a:8b:4d:11:e6:f9:06:95:eb:f2:a3:03:3a:
86:1d:ae:5f:db:68:92:02:c9:d6:b6:bb:0b:5e:61:fb:f0:f5:
f7:0b:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:12 2025 by rpki-client