Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: Y9TXfapcG3RuaJxluz0ZAEzkTaYAb7N0H4Al4Y4xEg0=
Subject key identifier: 46:68:EB:12:EB:16:F2:E7:98:C6:E3:62:06:06:E1:B2:D9:9B:31:68
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019894B6669CF0A66D2F909E8E1B09C64554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 12B9
Signing time: Sun 10 Aug 2025 16:00:38 +0000
Manifest this update: Sun 10 Aug 2025 16:00:38 +0000
Manifest next update: Mon 11 Aug 2025 16:00:38 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: 13JTz0KJjhzPEP1JK/0h1ibTzlEo64L3MAgwrWgHFDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:66:9c:f0:a6:6d:2f:90:9e:8e:1b:09:c6:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Aug 10 16:00:38 2025 GMT
Not After : Aug 11 16:00:38 2025 GMT
Subject: CN=4668eb12eb16f2e798c6e3620606e1b2d99b3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:db:4c:d8:2d:28:74:02:52:95:14:85:66:46:
42:fc:8e:5b:dd:59:2a:75:7a:5b:e6:b0:ab:fd:82:
56:41:66:bc:f9:90:69:57:a3:06:d5:6d:ff:ae:f3:
f5:1a:f5:08:e6:5f:36:91:dc:00:6f:00:99:df:e6:
0a:81:10:df:d6:87:8d:54:8e:41:07:45:fb:01:6f:
d1:5a:b3:ac:b9:4f:e4:65:bc:d1:76:0b:ee:12:01:
93:d5:6b:da:e9:21:f2:7f:cf:12:43:30:cd:6f:d3:
59:54:c4:4f:29:f3:ea:2d:0f:bb:c1:7d:2a:8a:8d:
c5:ae:5b:8b:08:7f:55:d1:f0:f1:cb:4f:ce:a3:35:
ec:cf:50:17:0b:96:25:80:3a:37:e3:f9:8b:e7:3a:
cb:75:2b:a5:14:48:e4:22:ef:89:17:70:5c:f1:eb:
28:c4:4e:fb:52:b6:dd:2a:0d:1c:da:8a:18:68:a0:
91:cd:37:57:75:0d:28:8d:ad:9b:d3:3a:08:2e:8a:
60:08:84:f7:5f:94:8f:20:8a:f2:e8:19:c5:32:6e:
95:0c:1e:56:73:90:6e:91:47:4c:12:7d:e8:56:1e:
c7:df:a2:78:7c:03:d8:bf:95:ab:eb:e9:9b:c3:63:
0f:64:6d:e4:ae:19:d9:2e:c4:0d:0a:9b:b0:fe:ba:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:EB:12:EB:16:F2:E7:98:C6:E3:62:06:06:E1:B2:D9:9B:31:68
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:b0:dc:e4:e5:b0:77:61:5a:5a:3f:ea:ac:8a:94:c3:94:
b3:e8:0b:1a:4a:65:cb:52:a7:7a:c8:9c:0c:ec:3d:20:39:8d:
83:21:ac:02:13:26:21:18:a6:f3:b7:d8:ae:ea:43:dc:fb:26:
a7:12:aa:16:c1:08:ce:6a:df:eb:30:2e:7b:6c:b7:e9:3a:17:
5b:9e:09:d9:00:1f:c6:dd:01:8d:4a:96:12:e2:5a:3d:fc:4c:
c5:2c:8f:ae:10:99:05:ef:c2:61:9b:03:e1:1c:33:71:0e:63:
8f:2c:a9:ae:e3:63:7c:ca:6d:a5:63:80:da:db:59:e7:e4:a0:
e1:d8:d2:73:5a:42:44:42:dd:c0:ca:b2:7a:4c:9f:88:e7:3a:
b7:6f:22:25:93:ea:48:ed:b1:91:92:59:a2:eb:e3:55:50:4a:
c4:bc:22:a9:b1:90:35:58:07:99:07:25:b2:66:0e:0f:84:0d:
bf:d3:48:38:a0:5a:49:71:9a:1e:0b:80:76:df:ba:34:ef:e4:
32:5d:41:37:7f:a5:c3:05:e9:11:dc:7c:98:b6:24:a0:d5:ad:
ef:ce:97:88:ee:70:75:2b:36:25:d2:da:75:66:22:50:b5:1a:
f4:4f:e7:98:cb:b9:e0:bf:ea:98:1e:2f:cb:13:d5:e8:e6:b2:
cb:83:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:51:02 2025 by rpki-client