Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: 4TcDPgRuQAgV3z6HA+Mf4M4PfQvw4rE3sREoXvM3vV0=
Subject key identifier: 81:6E:22:CD:AB:EC:51:AA:02:A5:40:04:79:F7:64:92:41:8E:F0:F9
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01989F03769E04AD572700BC317BB3CC364D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 16:01:00 +0000
Manifest this update: Tue 12 Aug 2025 16:01:00 +0000
Manifest next update: Wed 13 Aug 2025 16:01:00 +0000
Files and hashes: 1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: liNNN00fjSj/ZqBT2zz5xDtxRVYmF4PKgpiNlwMdVNg=)
2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:76:9e:04:ad:57:27:00:bc:31:7b:b3:cc:36:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Aug 12 16:01:00 2025 GMT
Not After : Aug 13 16:01:00 2025 GMT
Subject: CN=816e22cdabec51aa02a5400479f76492418ef0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:0e:1e:65:00:fb:77:91:1a:a3:05:40:cf:
ae:ac:b8:41:49:b8:98:94:25:ac:2e:17:ba:bc:e1:
af:30:82:bf:39:5c:31:4c:da:e9:d4:32:6f:ea:f1:
dd:ac:a4:1b:39:05:fd:6a:ea:68:10:e8:6e:50:16:
97:8c:96:ca:db:48:15:09:81:e1:9f:4e:42:e7:c2:
a0:bb:54:85:0a:39:f6:a6:b8:4e:e8:d4:bd:ce:1c:
e4:3a:87:bc:7b:04:9d:1e:55:72:a6:d0:5d:73:52:
df:7b:10:6e:99:54:37:a3:82:94:c7:95:e3:d9:05:
d0:49:dd:74:89:10:80:4e:73:f9:f1:49:49:5b:f4:
4e:66:21:f6:9f:08:2d:c0:66:1d:db:53:1c:3d:40:
e3:62:9f:93:a3:f3:8f:a3:a0:c3:d3:3e:0f:c9:58:
6f:64:85:69:41:a2:f7:2e:02:a2:b8:1b:f5:10:14:
db:93:d7:7f:a7:f5:e7:54:8a:6f:7e:2f:57:cd:04:
5e:19:71:b5:4c:c9:1b:5f:d4:b0:fa:db:7e:ab:58:
f5:79:22:a2:20:10:0e:91:b3:73:f4:de:37:4e:2e:
09:fc:93:8f:5b:3c:12:59:b8:75:d5:23:99:07:0c:
cd:e9:5f:f5:a7:53:ca:07:ff:7d:b5:b2:a9:45:ca:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:22:CD:AB:EC:51:AA:02:A5:40:04:79:F7:64:92:41:8E:F0:F9
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:70:5f:65:e3:2d:43:ad:db:e6:e9:32:14:6b:db:f9:05:b6:
48:d1:4b:c1:20:08:8f:a5:e9:38:30:1c:85:de:96:12:eb:d8:
99:c0:50:ec:51:fe:8d:38:e0:81:38:ac:c9:c3:ae:71:c7:27:
d8:e7:97:4b:4e:c5:1a:c0:f0:49:a4:4a:68:21:b5:3e:91:5c:
8a:b0:e9:59:23:40:b6:e4:3c:e8:66:bb:07:ef:74:1e:dc:0b:
f6:ac:ac:97:68:e9:ed:a6:f1:ca:4a:03:41:db:e4:b0:18:14:
6b:d1:88:94:a6:c2:84:6f:1a:aa:07:6b:fc:ba:ad:d6:14:5e:
80:d7:3f:f3:e0:e3:57:62:69:e9:6e:bb:63:1d:d8:3f:6c:ec:
1d:fe:38:d0:cf:67:b7:2b:5c:95:70:30:f1:47:67:aa:ed:07:
71:86:07:b3:b0:f3:68:ed:55:5a:25:bf:11:f6:80:df:2b:14:
93:be:e8:67:46:3b:9a:ff:b6:78:f1:e9:cf:52:22:07:37:c2:
d6:11:7e:99:6b:46:60:95:eb:2a:b8:45:a0:5f:44:c6:25:cf:
10:ab:55:b1:b7:fa:13:eb:d6:e8:0b:73:60:f4:ed:ad:b4:11:
b7:0b:be:61:78:59:68:93:47:d3:77:04:f7:98:9f:3d:9f:c4:
d5:df:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:55 2025 by rpki-client