Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: SwgzZLaEygGuxeD8AaSrTu7pKjD4IbKq8W6Ba5Z93uU=
Subject key identifier: 7A:BA:71:30:DB:19:C0:A5:E6:47:A8:74:E8:F6:A5:5E:69:7D:63:A4
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 019894B655CA43D9284725468147C36845A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 16:00:34 +0000
Manifest this update: Sun 10 Aug 2025 16:00:34 +0000
Manifest next update: Mon 11 Aug 2025 16:00:34 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: A7my+L5O0E8L+1lWY8LlsHSXmNgrZ0l2AuAu3SX7rqQ=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:55:ca:43:d9:28:47:25:46:81:47:c3:68:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Aug 10 16:00:34 2025 GMT
Not After : Aug 11 16:00:34 2025 GMT
Subject: CN=7aba7130db19c0a5e647a874e8f6a55e697d63a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:23:ac:34:07:e7:ef:56:3d:4e:e9:f3:ed:
8a:66:9a:13:a2:3b:32:78:b3:48:97:53:37:6d:50:
ae:f0:af:57:4b:96:45:ef:d9:96:1d:22:ba:7a:a1:
e2:58:90:e2:bf:8f:04:73:a2:c1:45:0d:f2:ce:f0:
4f:9d:40:db:5c:fd:e7:39:24:ec:55:63:b8:15:c1:
7d:47:4c:3a:5f:aa:2c:ae:79:e7:d0:8a:8a:07:45:
11:33:13:07:84:8c:4f:50:b2:4c:37:8e:ad:e1:5f:
b7:b5:5b:37:9a:46:65:37:51:c3:ab:18:c7:1d:73:
88:25:bf:6a:69:34:0a:48:df:a2:82:97:ec:f9:89:
e0:ce:97:b4:00:96:f9:ab:01:01:67:17:cf:33:04:
d8:af:a5:a7:8b:61:32:51:23:58:2d:d1:24:fd:b1:
86:ab:32:61:39:e3:54:cb:0c:7d:84:36:9d:84:23:
fc:e0:a5:7c:39:24:88:8f:7a:6a:d6:b4:b5:a7:99:
95:d3:91:34:63:a1:91:1d:53:c3:71:5c:f7:81:d6:
c5:17:8e:13:1d:f9:42:42:1d:7a:9d:2a:cf:45:4a:
9d:87:e7:61:d4:b6:42:4f:9a:4c:fc:4c:53:3a:28:
2e:87:fe:58:4b:b8:c2:00:11:cb:fb:57:85:92:7a:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:71:30:DB:19:C0:A5:E6:47:A8:74:E8:F6:A5:5E:69:7D:63:A4
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:02:a6:1f:08:1c:f3:14:23:34:4e:9e:95:54:cb:2a:02:f0:
a8:0d:6e:26:ae:ef:d3:ad:5f:44:39:00:82:6e:49:cc:39:b3:
38:30:34:fd:9b:f1:5d:f5:90:f3:86:c8:54:2c:61:39:59:e8:
e2:27:3b:2d:5e:de:f3:49:07:8e:2c:cf:aa:7d:49:14:65:6d:
e1:27:a8:04:ec:f5:e1:09:c6:f9:c3:d7:0c:90:58:ec:b3:36:
3e:71:20:b4:75:75:05:25:2f:6f:59:1f:83:f6:b1:6a:81:79:
1d:50:d8:df:14:ec:02:b6:48:00:a7:4e:96:74:1a:7e:f4:58:
4d:8d:3f:55:9a:86:db:a2:9b:c9:cf:78:1b:2c:92:a7:5c:3d:
a3:20:7f:f9:b1:33:93:83:2e:54:b5:dd:42:b8:d5:03:75:fe:
80:8f:43:4a:f4:0b:4c:41:d2:b9:69:2c:1f:40:c9:78:88:75:
0b:c9:7d:af:e0:7d:0a:43:df:67:b8:8d:0e:e6:99:ea:ca:23:
2f:fb:3b:91:a6:0f:f1:99:95:cd:5b:ef:16:f5:be:59:d4:2b:
02:b7:7f:ec:d2:b7:d1:9d:1a:78:01:18:bd:6b:64:65:1d:45:
5e:29:ae:b4:6a:c0:52:e6:f0:e4:5b:dc:a4:f7:46:40:54:ce:
2c:3d:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:09 2025 by rpki-client