Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: xm6a/jnK7ZkPGGVd3CbqN4gfOfNOVm74nfjHvXmBDZA=
Subject key identifier: E2:11:E6:9A:66:43:99:FA:E7:BE:11:20:C9:9F:4C:DC:6C:89:CA:47
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 019892235A9F8E019DC88BD53E569272CB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: DC
Signing time: Sun 10 Aug 2025 04:00:47 +0000
Manifest this update: Sun 10 Aug 2025 04:00:47 +0000
Manifest next update: Mon 11 Aug 2025 04:00:47 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: hSnQYR6Ho3G15LJAr9Fc6/Pd8Mcf5ajM2NCqGGO4GNk=)
2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:5a:9f:8e:01:9d:c8:8b:d5:3e:56:92:72:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Aug 10 04:00:47 2025 GMT
Not After : Aug 11 04:00:47 2025 GMT
Subject: CN=e211e69a664399fae7be1120c99f4cdc6c89ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:b2:b7:27:b3:dc:55:12:ad:60:83:f5:b4:
f3:2e:f5:13:be:65:81:18:36:45:f1:29:9e:c4:54:
c8:07:4d:26:d5:a0:7b:42:d7:0d:08:51:c4:9b:4a:
f6:c3:dd:43:18:a5:fe:dd:56:6f:98:32:22:d5:6c:
a3:57:6a:fb:d7:d8:2e:b8:26:ec:c0:b4:91:e4:5b:
fa:c0:e7:21:ab:c7:11:7b:34:b8:c3:cf:14:82:3d:
de:a2:2f:09:5b:34:56:fb:7c:6c:d2:b3:8b:21:4b:
39:36:f7:56:cf:16:29:55:aa:e0:cc:a6:0a:43:6c:
43:07:1f:80:0c:f9:e5:c4:c0:5e:fe:8d:f8:d7:87:
4d:cc:a3:2e:b5:e9:4c:a0:78:63:4f:5d:a1:f6:06:
b9:9e:83:4c:9a:76:ec:d9:da:e9:1b:30:cd:21:f2:
b5:2c:05:fd:e1:40:a1:7c:aa:19:2e:62:8c:d2:32:
5c:a8:5f:8e:d8:f9:6c:12:e2:97:02:4f:c1:0d:07:
9c:5d:34:88:0a:2d:88:85:d1:a1:fb:0d:71:9e:d0:
59:8d:3b:e4:5e:c3:3b:90:f2:72:33:e2:e7:04:9d:
d2:02:3b:39:f3:d9:bb:27:06:ff:7c:c1:38:67:9f:
4d:af:ae:f9:01:60:e7:ff:96:23:45:c4:2e:e6:20:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:E6:9A:66:43:99:FA:E7:BE:11:20:C9:9F:4C:DC:6C:89:CA:47
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f8:23:d0:d0:01:c9:c7:0c:de:6a:5a:64:64:78:44:80:37:
5c:dd:1d:61:d2:4b:5a:89:4b:1b:ee:fc:b2:af:6c:82:fa:4d:
a0:9e:ba:21:9b:4f:a0:c5:c3:03:9b:3a:09:13:c7:b9:ea:21:
76:1b:e2:40:21:3f:f9:fb:31:eb:0a:9b:b9:5b:06:9d:9a:4b:
a7:79:f8:d1:1f:81:b1:a7:82:a3:bc:44:3a:a1:13:d2:34:7f:
3b:7d:7d:c8:aa:32:2e:e6:73:95:4d:af:4e:56:05:8b:44:0a:
4b:c6:6f:90:97:06:54:fd:52:48:b2:d1:ce:5f:71:57:8f:c6:
2b:a5:80:ce:a5:6b:84:2b:3c:fc:70:75:69:7f:7e:3f:25:a3:
31:44:3d:8b:b2:b5:a3:bd:53:8d:80:a9:3e:c2:87:e9:be:a3:
3a:ee:c5:d6:79:bc:18:11:14:ce:ea:bc:31:e2:a0:b7:21:8e:
87:cf:ff:06:ca:93:8b:c3:a7:87:4f:bd:8e:a8:85:2b:5f:67:
02:b7:f6:27:f6:a9:71:28:23:e3:5e:f3:66:66:b3:57:08:9b:
ab:d8:88:0a:4e:55:d2:e8:57:42:e1:f1:4f:5f:51:fe:03:0e:
66:bd:f6:ef:24:4f:d7:9e:a4:23:b1:92:e1:2c:37:08:07:f2:
ff:62:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:01 2025 by rpki-client