Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json)
Hash identifier: 7tFGNgJTR3FBtasl6/s5oCuyDNjdjz3FmoE1ZPSULsc=
Subject key identifier: 45:A4:31:FA:83:41:35:AE:C3:1C:4C:61:A2:20:4E:1E:07:D3:CF:B8
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 019873E362DF643F7015C077AC0C50C5AB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:18 +0000
Manifest this update: Mon 04 Aug 2025 07:02:18 +0000
Manifest next update: Tue 05 Aug 2025 07:02:18 +0000
Files and hashes: 1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=)
2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: OVchmhciTmAmlmWj9xs12HINr4/eeu8fn1tNqaAosSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:62:df:64:3f:70:15:c0:77:ac:0c:50:c5:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Aug 4 07:02:18 2025 GMT
Not After : Aug 5 07:02:18 2025 GMT
Subject: CN=45a431fa834135aec31c4c61a2204e1e07d3cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:dc:c9:ce:8a:db:34:2f:23:1b:3d:95:37:
48:e4:ff:df:ca:c5:cf:5d:dd:0a:83:1b:2e:16:50:
f3:c1:94:3c:09:4f:71:47:cc:11:9e:02:5e:d6:c7:
26:c2:28:f1:39:10:69:f6:cf:78:f5:96:df:0b:e3:
a1:eb:6d:a0:35:1b:f0:bc:4c:e1:84:7a:fe:49:45:
c0:8a:10:bf:f9:0d:be:23:0d:33:a5:fc:3f:78:d4:
31:ee:fa:b1:f4:41:23:9c:6c:46:93:42:c1:07:2a:
5a:63:91:8e:32:13:58:da:41:f0:4f:25:44:18:29:
67:39:08:17:c6:4c:a7:2b:42:b5:da:ee:c9:4c:1e:
7f:ea:4b:b6:41:15:46:34:b3:af:7d:63:c7:9d:f5:
dd:67:5c:80:64:c7:d1:b7:f6:6d:a7:e1:cb:19:0a:
61:c3:7c:d6:a6:e8:c6:17:81:43:0e:78:5c:c5:84:
b9:8a:a8:5e:6e:30:fd:1d:cd:b2:a3:77:6c:e9:1c:
36:60:a1:a4:7b:4e:c1:20:4d:72:df:32:83:31:75:
ac:9c:48:ea:fb:14:42:32:7b:35:58:95:b0:9e:5f:
cb:d0:53:55:14:6e:cc:9f:a9:53:4d:60:8a:41:8c:
7d:8d:93:b7:d4:f9:f2:d3:8f:f7:d7:d6:88:3c:e9:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:31:FA:83:41:35:AE:C3:1C:4C:61:A2:20:4E:1E:07:D3:CF:B8
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:57:f0:8c:55:c4:16:ac:67:71:41:f8:08:f9:26:ae:b9:6d:
35:e2:85:9e:0f:09:39:0c:d1:18:e8:05:32:74:4d:1d:13:fa:
72:aa:0e:30:c3:0b:96:70:ee:dc:2d:1b:41:0c:54:67:54:b7:
f6:d8:19:8e:a1:a8:d3:1e:e8:ce:2b:39:23:06:5c:48:eb:8a:
3d:58:24:a8:f1:74:5e:d5:e7:4a:47:4e:37:ab:89:8a:d8:3b:
80:08:0d:4e:4b:87:2d:6a:26:7d:28:75:65:3d:99:da:5d:ab:
39:86:9e:d3:e5:77:6d:b3:fb:13:df:4f:3b:1c:d2:7c:7c:9b:
b4:6a:ec:04:30:03:33:17:46:99:a3:7a:8e:c9:cb:5c:50:a0:
55:47:63:7e:2e:8a:48:ad:7e:de:98:2a:10:9b:08:a0:a5:1f:
b6:f8:db:95:33:ff:ec:51:0d:8b:f4:be:49:2e:1e:17:cb:ce:
47:e9:9e:f6:e9:4e:f5:fb:ce:4f:88:7a:94:c0:05:88:14:df:
18:20:07:01:e3:b5:f9:8d:21:e2:37:f5:4a:11:46:db:8f:e7:
b7:7a:f5:f2:ad:9a:6a:9c:76:cb:db:83:22:b7:28:a1:2a:7d:
3d:9d:37:a8:0b:bd:5e:2c:15:e4:39:bc:51:ac:0b:84:36:b4:
d8:0b:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:29 2025 by rpki-client