Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier: JFNhRA8oSFmQ65MAMjyP7D/p9cXUJnTzrMpdNcYc+F0=
Subject key identifier: 43:B9:92:D4:92:18:73:31:B1:59:04:DB:06:0E:86:56:1A:46:2B:A3
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer: /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial: 0198A04D7ADEF6F81AFD846B4C9F140D3C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number: 0632
Signing time: Tue 12 Aug 2025 22:01:28 +0000
Manifest this update: Tue 12 Aug 2025 22:01:28 +0000
Manifest next update: Wed 13 Aug 2025 22:01:28 +0000
Files and hashes: 1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: j/sssQtAYEEK8uBG749OQz5n6dWBmcTKP+Uj07ycQUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:7a:de:f6:f8:1a:fd:84:6b:4c:9f:14:0d:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Validity
Not Before: Aug 12 22:01:28 2025 GMT
Not After : Aug 13 22:01:28 2025 GMT
Subject: CN=43b992d492187331b15904db060e86561a462ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:f5:ae:e1:d8:dc:f3:44:82:f7:d4:35:58:
e4:0e:e0:d8:74:67:e1:0c:af:9d:df:62:10:71:97:
b8:24:09:cb:ef:8e:34:19:9f:80:88:f3:c7:35:f9:
e0:bb:b7:ec:1b:64:92:76:2c:dc:87:05:bd:43:49:
96:e2:06:75:21:3e:6a:fe:7b:10:88:96:97:20:43:
50:9c:75:d3:ed:56:7e:9a:34:09:b5:47:22:8a:81:
4e:08:e2:bf:34:fc:87:7a:eb:7c:f5:b4:bf:3c:3a:
9e:f6:3e:ab:d2:ea:b5:08:eb:f5:8a:af:9b:f4:53:
ff:c9:48:70:71:34:2e:e8:e5:74:ad:b0:45:f1:4f:
de:c1:43:c0:4a:70:bd:09:f0:db:c2:e7:fd:03:a9:
c5:e2:0c:bb:fa:53:55:af:89:6d:0d:40:42:8b:74:
bb:74:f7:63:ca:12:cb:16:36:db:f6:72:12:e8:0b:
a6:9b:4a:63:dd:93:d2:ae:fe:55:da:1a:fd:bc:fc:
95:0b:6f:68:87:d3:a8:fb:1b:1d:e5:15:9a:d0:8e:
cb:e2:63:ea:29:0a:35:a1:cc:d1:2c:72:75:36:4a:
16:d3:6b:15:2f:0e:c3:63:a0:01:b4:37:eb:32:24:
b8:42:0f:c4:cd:e9:8c:2f:a2:1a:51:4c:9d:e8:8b:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:92:D4:92:18:73:31:B1:59:04:DB:06:0E:86:56:1A:46:2B:A3
X509v3 Authority Key Identifier:
keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2c:e2:ea:34:5b:e8:b8:55:96:23:f2:05:c3:6c:72:3b:c7:
2f:e8:d4:45:b3:6d:5f:83:8c:17:70:4c:de:d8:72:78:6d:45:
4b:ad:03:6d:bf:b0:5a:5a:d6:2d:65:1a:5d:3c:42:55:d4:fb:
5e:5a:08:21:07:6b:4a:fa:8e:5a:7f:92:92:5d:b7:b8:08:00:
54:a8:20:ad:51:02:3b:66:73:23:25:76:ec:65:b3:ca:e0:a5:
cc:ad:99:9c:5a:30:76:5e:6f:45:ee:c9:69:6b:60:02:0a:8a:
7f:d8:6a:2b:90:fd:eb:ff:3b:36:cb:bf:b8:c5:b5:8a:40:8e:
e6:42:6d:45:94:99:06:8a:a9:d2:a1:58:ba:e4:f2:3b:f7:60:
cc:55:2f:aa:97:60:1c:6f:22:4d:b0:4d:f3:fe:b7:5f:47:58:
6e:e4:4f:e5:53:98:c7:ba:87:70:e3:11:7b:38:42:23:a4:b5:
af:95:65:65:67:c0:3c:a3:1b:c0:8d:ca:f3:33:17:20:6f:ad:
b3:ac:ca:3a:22:f6:f2:9a:e4:99:ab:2c:2a:47:e7:8c:e9:82:
a9:d8:d9:3e:1a:65:6d:91:2c:cf:35:bf:f4:7a:51:c9:d0:6c:
d3:3a:6e:88:0b:d0:bf:13:07:29:b0:c4:ea:88:b3:8d:5a:3c:
fe:55:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:52 2025 by rpki-client