Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: moNQUZlG+s1o+yhuM7o2KPSIEtWhD4Hac0NKNKht5pk=
Subject key identifier: 04:E3:0A:AB:4D:B7:F1:3E:5D:BB:7B:F8:A6:1F:4C:AF:96:08:55:FE
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 0198737443FB1219CE5C278E626523EF720E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 10FA
Signing time: Mon 04 Aug 2025 05:00:56 +0000
Manifest this update: Mon 04 Aug 2025 05:00:56 +0000
Manifest next update: Tue 05 Aug 2025 05:00:56 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: pHxIUvWM3vfduDHHdy54P0rgADLcAuQVtzBAPVYfo2g=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:43:fb:12:19:ce:5c:27:8e:62:65:23:ef:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Aug 4 05:00:56 2025 GMT
Not After : Aug 5 05:00:56 2025 GMT
Subject: CN=04e30aab4db7f13e5dbb7bf8a61f4caf960855fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:86:ac:67:28:f0:e5:9e:9b:62:09:90:de:
8d:9f:c1:a5:a6:1a:3c:97:78:10:f8:c2:f5:73:6b:
f5:4a:c2:8c:5b:33:bb:35:b8:42:dc:18:43:5d:42:
f0:62:97:a3:8e:73:25:aa:c6:50:84:8f:98:f9:15:
9e:82:4f:7e:c8:b1:71:38:06:c5:47:b6:30:4a:13:
42:7a:b7:13:09:9a:6f:c3:bc:fb:58:ef:af:82:5b:
1e:cc:63:d6:a1:77:70:68:30:6e:9f:87:02:29:cd:
d5:ee:3c:a8:c4:36:c0:3e:b7:ba:1d:f7:db:d8:ce:
23:cd:77:a2:5f:ea:63:c7:00:cc:e1:77:d1:5f:5d:
78:f1:01:e1:9d:c0:58:9b:55:94:ef:fb:ef:26:fb:
29:d2:fe:e9:8f:45:70:22:fd:b3:70:bb:da:b9:6d:
5d:3a:9f:cb:e2:77:d1:e5:0d:b7:93:02:5f:d7:50:
39:a7:03:8d:c1:b6:9c:b2:f0:28:c2:cf:fc:26:aa:
79:53:01:47:c7:ae:54:de:ae:83:67:07:2c:25:6f:
36:42:0d:a4:96:c5:ad:21:f8:7e:22:77:07:52:00:
69:01:54:60:e4:02:8f:86:fb:b1:e6:45:cd:82:a4:
7c:fb:2e:17:7f:c0:1f:84:7d:46:eb:61:78:25:60:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:0A:AB:4D:B7:F1:3E:5D:BB:7B:F8:A6:1F:4C:AF:96:08:55:FE
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2e:cd:d6:b8:04:ae:6c:3d:1a:47:88:41:e4:09:cd:61:e6:
d3:3d:34:3d:af:55:f5:01:a4:0e:09:fd:e6:f6:05:62:c7:b4:
8b:d5:8c:66:5e:9e:65:c3:4d:91:cd:eb:75:77:f3:d0:9a:13:
53:ee:8a:df:b7:2e:86:67:b1:9f:14:9e:60:e1:b4:46:2e:78:
98:81:5a:6c:04:d3:23:a1:89:28:02:40:30:3c:e3:19:fd:50:
36:68:0c:17:43:7b:4c:87:a2:20:e4:d2:0a:d1:08:ef:38:25:
18:6c:07:e3:d7:31:b0:83:79:6b:3b:76:6e:de:d6:cc:a2:ab:
7b:a0:1f:cc:ef:25:8e:11:e4:67:dc:f3:4f:f8:ff:27:7a:14:
b4:d1:80:01:32:97:b1:e2:49:47:97:a8:e6:9d:a8:97:0d:ae:
ac:b4:f7:5f:f7:60:0a:c8:b7:0d:a4:25:90:d8:35:7b:3b:0c:
84:e3:95:80:1f:2d:dc:ab:e9:32:1a:ae:59:ed:e7:f2:d4:92:
b4:80:36:18:2a:d0:ad:b4:05:aa:6a:6f:8f:b6:93:6e:cf:97:
5b:6e:ce:bf:b7:0f:91:64:ef:d5:2c:e6:f3:ec:36:d3:92:85:
27:86:11:a8:1b:8d:49:21:2c:fa:94:06:c7:2b:fa:7c:9a:7f:
92:43:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:02 2025 by rpki-client