Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File: 5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier: 8rAMlnwW//UMkzpNPqUnHUPu45Meke5SK4zDI/f3Lc4=
Subject key identifier: 24:A2:AA:4C:32:DF:7F:59:6E:6D:43:C0:FE:3F:B2:59:4E:AC:75:74
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer: /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial: 0198744FA63ECBE2B7FDAF476E99D9A0989B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number: 5D
Signing time: Mon 04 Aug 2025 09:00:33 +0000
Manifest this update: Mon 04 Aug 2025 09:00:33 +0000
Manifest next update: Tue 05 Aug 2025 09:00:33 +0000
Files and hashes: 1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: cn4BSHGTNf2Wj5oi9EkEow94Nv8d7xZQoj2nlajREKw=)
2: crXLrPic8k9vyE5SxEPR-_3DVks.roa (hash: isyyv0lSga2YsVBxt0riFZT/vQhsYIIC7MEzRQbYvEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a6:3e:cb:e2:b7:fd:af:47:6e:99:d9:a0:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Validity
Not Before: Aug 4 09:00:33 2025 GMT
Not After : Aug 5 09:00:33 2025 GMT
Subject: CN=24a2aa4c32df7f596e6d43c0fe3fb2594eac7574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:da:bb:ab:ff:b2:e9:34:21:39:0a:0e:18:
25:54:bf:35:b4:01:a7:21:d0:b9:2a:17:93:7d:e3:
ab:9b:5f:4c:c4:5b:56:bb:f9:3a:57:b5:df:4d:9e:
77:18:8d:6a:a7:97:58:0d:b2:8f:58:3c:ae:c7:16:
9a:c2:68:8e:d8:4c:54:ed:95:a8:15:d5:e3:43:73:
de:98:ea:8c:62:37:f5:64:59:a4:3d:b7:fc:8b:65:
b6:1b:a1:07:8c:4c:0c:5e:99:32:55:7a:39:b8:45:
9f:d7:79:99:03:3c:3b:90:d9:06:0e:89:59:7d:8e:
99:c6:fc:e8:fe:da:ea:a6:66:a8:eb:ec:3e:5f:56:
b5:15:39:ae:c1:49:7e:73:75:26:1c:29:c5:7a:71:
f0:5d:d1:2e:46:81:73:5d:14:4d:9a:32:c4:d8:a3:
9c:0e:dc:d8:14:a4:e6:b7:32:f3:ce:22:c8:53:d8:
8c:3b:00:a8:29:fe:53:ef:08:24:3c:ce:31:7d:65:
59:af:5f:d4:85:80:1f:ad:c0:74:1a:7b:c4:14:1b:
e8:a7:dc:d5:f4:bf:1c:17:87:ff:75:fb:f2:08:2d:
7a:6a:8b:dd:88:a8:53:1e:51:6e:7f:dc:7c:ec:0b:
99:f5:ff:de:0e:1b:d2:e7:f1:d4:b6:b0:35:7e:06:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:AA:4C:32:DF:7F:59:6E:6D:43:C0:FE:3F:B2:59:4E:AC:75:74
X509v3 Authority Key Identifier:
keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:29:1e:46:fd:76:50:7e:16:e0:21:87:fd:ae:4a:0a:4c:
80:c1:39:fc:b8:ee:4e:82:32:b4:a4:52:36:e0:5b:f8:60:69:
85:7a:cd:75:ce:aa:61:1b:bc:ef:d0:f2:27:96:e5:f5:62:cc:
dc:74:9e:d3:87:5f:a2:8e:8b:32:a0:30:5a:03:c1:c1:28:63:
23:f8:a7:28:22:fb:9f:6f:b4:ce:55:35:5b:3c:59:56:e3:21:
89:b7:5c:85:89:87:ff:67:cc:cb:00:7a:4b:b0:ba:7a:51:0a:
40:88:9d:c0:ed:a5:20:ed:ab:7f:38:bc:7d:2a:5b:53:c1:37:
91:90:49:11:30:02:c1:b7:01:e9:45:45:ce:5a:9e:2d:6b:30:
96:5d:09:53:6d:a1:2b:cc:ed:4d:f9:1e:aa:14:0b:49:fc:d6:
51:48:f9:28:d2:b4:2b:02:11:4c:51:02:d6:79:3b:2b:92:e0:
51:4a:cc:b4:11:73:b2:37:18:df:2e:3c:ae:77:c4:39:5b:fc:
24:6e:15:38:94:ec:fd:7c:37:dc:0d:cb:4c:d3:48:fa:71:0a:
76:b7:cb:57:1f:bb:dd:19:78:08:0e:12:1d:39:f9:52:41:75:
9a:2f:7a:b3:0c:c5:64:f5:76:21:6d:c8:63:ab:04:fa:b4:d5:
73:0e:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:04 2025 by rpki-client