Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: fohwm1ugzIIC0G1NRhRRj+HfYwOn4u2oOrEVjvE2OA8=
Subject key identifier: 75:C0:BB:B3:3F:80:D3:AA:11:44:70:B6:11:02:46:9C:EC:56:55:7B
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 01987C40CDE826789AA932ADD7666A94C1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 1697
Signing time: Tue 05 Aug 2025 22:01:18 +0000
Manifest this update: Tue 05 Aug 2025 22:01:18 +0000
Manifest next update: Wed 06 Aug 2025 22:01:18 +0000
Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: qi/WIQexS/D4naikxnIooT2D4+dhBJRc/RSPNSJMPS8=)
2: SXG-e2hHIIAl-yj4qBi6FUi9wGY.roa (hash: +fTL7yItTRc/AAESJMlIEyzwJCD39qE6Ysoda7xR64c=)
3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=)
4: weFhJ6o0dUzqAWnzZyWVgR-4cfw.roa (hash: ++9M17cqnkYizKWfJDJXuz+WROEMWThTBlJS5u4HdI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:cd:e8:26:78:9a:a9:32:ad:d7:66:6a:94:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Aug 5 22:01:18 2025 GMT
Not After : Aug 6 22:01:18 2025 GMT
Subject: CN=75c0bbb33f80d3aa114470b61102469cec56557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:91:bd:6c:fd:c7:ce:cd:0e:e4:9a:e2:c5:
c5:8f:ca:71:f7:f6:02:99:f5:0b:e4:2b:70:b7:e9:
de:5e:f3:64:2c:9e:83:bc:fe:9b:c7:aa:91:9a:a1:
24:bf:df:7a:cb:13:49:56:1c:28:78:47:2d:e0:73:
a8:74:26:ad:52:b8:35:90:4a:42:1e:ee:db:74:bb:
a9:6b:96:04:8c:ad:3c:5b:a8:de:95:1a:c3:4b:25:
4e:4e:fe:10:a2:dd:63:6b:0f:6c:b0:1d:03:02:f4:
95:f4:85:11:4c:24:9c:89:7b:54:ea:cc:82:6b:14:
95:ab:cc:32:98:a8:bc:a7:1e:d6:c6:88:b7:54:26:
3c:8e:85:f1:3d:53:91:27:dd:67:e9:ce:d6:d2:0f:
4c:6e:c5:4c:21:28:92:cf:50:e3:dc:51:5c:06:81:
09:af:c9:2e:80:fb:b2:8e:f0:cf:a7:0a:01:9b:05:
b8:0e:6b:d0:a7:1d:a8:dc:95:d2:4c:b5:0b:5e:15:
78:0d:c7:a3:aa:e9:ee:2a:78:f1:95:7c:39:aa:b4:
76:b6:fa:99:36:46:6e:62:ae:53:17:95:f5:3e:36:
b4:1e:ad:b7:da:7f:12:22:e5:88:12:fd:d9:86:97:
af:0a:d4:6d:45:d7:7a:ae:7a:6a:2b:69:db:cb:01:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:BB:B3:3F:80:D3:AA:11:44:70:B6:11:02:46:9C:EC:56:55:7B
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:61:05:e6:e2:4a:05:3b:e9:6c:71:8e:7a:93:6f:35:96:b7:
77:2e:71:df:12:48:2f:6f:7f:4e:60:d4:a1:17:2e:c5:27:e1:
f8:01:60:75:92:98:64:fc:08:b1:18:de:23:c1:89:13:e3:9f:
5d:c3:75:80:f2:03:32:38:82:b7:bf:89:48:26:8b:35:c7:4f:
6a:17:fe:00:28:67:c2:d0:15:7f:7b:25:b5:11:52:28:bc:2a:
c4:56:67:23:4c:e1:e9:fe:5d:8f:53:e3:74:dc:85:7a:81:a4:
c5:69:36:83:d5:7a:57:0b:14:1c:f0:3b:1f:f6:b9:21:f0:ff:
59:41:21:c1:f9:94:21:e3:bf:29:16:3f:8b:2d:45:b3:94:64:
28:ba:17:f6:bc:ea:51:5a:6f:eb:46:6c:a3:aa:94:5e:6c:5f:
0c:d8:19:f4:f2:86:2f:cd:85:9c:0e:94:a9:38:46:92:5f:9d:
73:87:74:4c:f7:e7:a0:be:3b:34:dd:92:d8:03:39:77:1c:09:
9b:bd:97:f1:31:c0:63:98:8e:8c:a2:67:ae:c9:4c:10:2e:78:
63:93:11:08:91:7d:30:7d:5b:48:76:6a:07:60:b3:6f:c2:f8:
e4:e7:e7:40:69:84:2e:45:81:54:62:6f:d9:cb:c7:2d:78:7f:
8a:aa:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:40 2025 by rpki-client