Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: BDeAXsmd8y+yTmYT7amwuTp81qb05w3j/nAPmgXJCS8=
Subject key identifier: C2:8C:FC:4A:21:9D:35:3A:06:54:7F:59:10:08:40:26:EA:76:E2:0D
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 01988FC774C1E76BE8630B8F70D5E67E9895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0951
Signing time: Sat 09 Aug 2025 17:01:09 +0000
Manifest this update: Sat 09 Aug 2025 17:01:09 +0000
Manifest next update: Sun 10 Aug 2025 17:01:09 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: gLJc79YTSoBDw1wMivsBvUoC49r8A85DUt2tnkP+wnc=)
2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:74:c1:e7:6b:e8:63:0b:8f:70:d5:e6:7e:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Aug 9 17:01:09 2025 GMT
Not After : Aug 10 17:01:09 2025 GMT
Subject: CN=c28cfc4a219d353a06547f5910084026ea76e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:a5:72:73:c7:28:33:9d:02:f4:85:c8:3d:
71:d5:94:02:c0:7a:cd:15:c5:14:7b:b2:f9:6f:de:
8d:d7:f8:dc:99:a9:35:ef:42:35:53:e8:e1:a8:2c:
4d:a8:00:09:39:51:09:0c:a1:df:f4:84:48:1f:20:
7d:38:81:ac:a6:bf:d3:50:0f:13:37:62:08:d7:22:
f0:1b:43:4f:74:5d:35:7c:ce:5a:84:0a:ce:1b:3e:
78:04:19:2b:b8:9e:79:2f:11:27:61:5f:25:3e:31:
df:8e:5f:be:bb:57:d1:6f:e1:6c:ce:0d:25:a4:20:
f4:65:cc:b6:df:f7:9d:78:da:fb:1e:ed:4a:c5:13:
fe:25:89:6b:26:ed:40:af:52:4b:7e:37:bc:96:c5:
cb:1e:43:6e:ea:9d:6a:0d:90:8a:54:15:d1:e5:db:
f3:bd:22:50:e0:d5:67:1f:79:68:f9:d8:5e:11:61:
31:29:72:eb:0e:75:3b:94:1e:e0:b2:4b:d0:29:d0:
7c:de:90:99:57:9d:1c:25:9a:02:1d:89:f9:f3:ee:
d7:2b:6d:47:a3:ca:2a:6b:8c:65:0b:d2:1e:a9:19:
b5:2f:a8:4d:56:61:74:f4:69:7d:3c:b8:1f:de:c9:
04:44:cd:93:ba:94:95:37:c4:c3:26:72:fb:d6:4a:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:FC:4A:21:9D:35:3A:06:54:7F:59:10:08:40:26:EA:76:E2:0D
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7c:f4:41:35:39:50:9f:27:50:a9:13:55:b5:66:08:91:5e:
63:73:77:9d:9f:69:c0:b2:c1:c5:39:69:ee:a4:77:01:c8:e7:
43:d1:7e:50:92:e2:cd:e1:4a:8d:05:9b:0f:7b:0b:d2:b1:85:
0f:d6:32:e9:6d:99:0e:1e:11:9a:80:72:e4:0d:53:a1:2b:51:
0b:fd:68:1e:88:a2:94:8e:3f:28:b2:76:56:1a:38:3f:f4:85:
98:51:56:25:54:83:05:00:b1:38:ac:1d:0a:cf:3a:93:bd:e8:
da:a4:4d:57:b8:20:9e:0a:23:de:d8:2e:f2:f8:bf:ba:95:62:
5a:f8:c6:65:14:4f:42:b6:be:ca:6f:8b:9f:5c:2f:d6:5c:ea:
85:71:f6:9b:db:eb:68:d8:42:2a:aa:74:7d:de:38:92:ca:56:
1d:bd:d7:67:d8:5e:a3:23:bd:03:c1:98:03:e9:ff:f9:d2:1c:
6c:dc:8a:e1:04:ba:0f:b9:1b:ee:0a:13:2b:81:bc:c1:46:04:
82:a0:a9:21:90:f5:51:f7:b3:55:5d:ae:75:f2:7f:5d:91:af:
d3:3e:aa:d3:e0:fc:5a:be:4e:5a:6c:98:ec:ca:a5:a2:f0:fe:
9a:7b:7e:3a:26:bf:74:84:9c:6a:be:83:0f:88:66:b4:81:05:
c0:37:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:43 2025 by rpki-client