Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: zsIVXjrMlUE9jC4mBWxwYRX/wwXy66H/clzJ4FBin+g=
Subject key identifier: 40:38:90:12:31:B6:FD:43:A0:34:24:2C:48:F1:89:AB:82:64:46:AC
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01987DF88216157BF81CB37A0F49429C3459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0F1F
Signing time: Wed 06 Aug 2025 06:01:34 +0000
Manifest this update: Wed 06 Aug 2025 06:01:34 +0000
Manifest next update: Thu 07 Aug 2025 06:01:34 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: Iyg1XMcUbk05GOoSbp1usrnT665jBUQ4MBIRLC/jWZ8=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:82:16:15:7b:f8:1c:b3:7a:0f:49:42:9c:34:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Aug 6 06:01:34 2025 GMT
Not After : Aug 7 06:01:34 2025 GMT
Subject: CN=4038901231b6fd43a034242c48f189ab826446ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:b2:2d:ec:e9:4e:4f:44:e8:51:15:1a:b1:
66:1a:ec:29:76:1d:d3:d7:7e:ee:2c:18:a7:de:19:
05:c6:78:b8:e6:7a:5b:9f:af:a5:07:55:92:dd:46:
8b:6b:0b:95:5a:c0:5b:c3:fe:c0:c9:3e:17:e1:d4:
87:82:f9:18:4e:bc:1a:6c:ce:f0:37:21:67:99:03:
34:36:0f:1d:bc:08:bc:93:f6:0e:25:1a:3e:04:88:
8d:6f:39:43:87:bd:f3:4f:24:7a:60:b3:f7:43:20:
e2:7c:de:ea:68:7a:58:6d:e4:cc:5e:80:28:09:be:
ae:6b:0b:dc:47:79:be:27:f9:4a:09:af:09:f5:65:
75:66:1b:61:29:b1:6f:71:c7:6c:b3:2c:d3:f1:ab:
43:19:99:49:18:44:de:b5:2a:05:08:db:66:2b:91:
9e:41:10:15:30:61:8e:00:d5:7d:d2:71:0e:26:bb:
ba:d2:ac:e8:ff:88:c6:7d:3f:f4:54:ee:bf:18:d7:
df:7f:c7:d5:9d:0f:54:ce:38:65:4d:fd:37:61:79:
f4:72:ba:3b:00:89:05:fc:55:64:79:9a:fd:ea:5d:
8f:ad:eb:0a:a2:a7:48:92:d0:e9:34:a2:a5:0f:a9:
99:d5:41:fd:56:2c:db:1e:89:fe:55:0a:b3:73:8f:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:90:12:31:B6:FD:43:A0:34:24:2C:48:F1:89:AB:82:64:46:AC
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9e:e5:34:2f:78:50:61:2f:79:60:2b:e8:fc:35:d0:f2:77:
89:3f:e2:7d:fb:83:33:71:b7:83:19:6b:f5:e2:9b:eb:16:4a:
cb:2b:79:3c:3c:78:05:19:e9:be:ba:15:b6:36:41:50:8d:af:
55:1d:01:9e:09:f5:b1:96:1c:6b:ef:b8:a9:95:2e:8d:da:7b:
93:7d:ae:8f:92:52:a1:c7:0d:80:d3:10:ec:34:6f:cb:86:80:
a8:46:c4:fa:87:19:5f:7b:8b:59:34:19:e1:6e:4d:db:a6:c0:
8d:bc:b5:05:70:6d:58:2a:cf:f9:1a:ed:da:6d:5b:eb:99:4f:
8b:cd:3d:b9:27:37:a8:cf:61:74:9d:80:35:5e:e0:4d:a0:69:
32:52:d2:49:0e:12:17:3c:b1:02:65:36:9a:f4:8b:13:78:b0:
f8:eb:29:a5:b2:5f:76:1d:19:71:de:35:15:c5:4c:bb:ae:ba:
27:f8:0f:73:64:56:23:20:90:ab:2f:cf:ab:5d:fa:6f:56:47:
05:7e:af:31:84:fd:fd:10:22:a3:4c:de:86:78:b7:87:17:4e:
e2:dd:a9:cd:fd:02:5b:3c:b0:d9:85:aa:74:35:7f:73:25:a7:
a0:17:f8:85:fd:ce:81:42:52:63:1f:76:e2:ef:66:66:8b:06:
6f:55:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:30 2025 by rpki-client