Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: XrDJBT/mPMZQdFI+IbuRredM8Exkk5viJqRitmipX8w=
Subject key identifier: 6A:30:B4:FC:7A:F9:7D:58:0F:C9:71:17:49:A1:98:DE:F6:06:2A:FD
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 01987E659641F9259A30886A611B0FE91A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 12B9
Signing time: Wed 06 Aug 2025 08:00:43 +0000
Manifest this update: Wed 06 Aug 2025 08:00:43 +0000
Manifest next update: Thu 07 Aug 2025 08:00:43 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: b/oFHqpq9GXNiCEFXa9GaYyGTaXe1xdrl7C5MRSk6OY=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:96:41:f9:25:9a:30:88:6a:61:1b:0f:e9:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Aug 6 08:00:43 2025 GMT
Not After : Aug 7 08:00:43 2025 GMT
Subject: CN=6a30b4fc7af97d580fc9711749a198def6062afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:0c:31:92:38:e5:3e:11:de:0a:70:45:47:
ea:63:64:13:a9:41:7c:1b:10:bb:76:ce:ae:d2:26:
3a:32:98:46:7b:14:e4:d9:b4:9d:9d:e9:82:e6:77:
67:2a:fc:b8:9b:b3:2c:d6:02:af:66:77:d9:21:b6:
96:ed:90:b3:86:63:f8:54:36:6a:20:a9:4e:58:58:
aa:20:03:7b:51:25:16:b6:45:3b:49:0f:fa:0f:8a:
25:86:7d:37:52:d6:4f:08:7e:b9:a3:88:92:e8:4d:
de:21:a0:7a:17:54:78:3c:4e:d2:27:82:e7:ec:09:
8e:30:c6:60:fa:1f:36:ae:a2:ef:ef:ac:8b:22:7f:
d1:ab:4b:6a:94:70:98:90:11:40:9d:92:6a:56:17:
16:9d:11:8d:88:ed:a4:ad:37:b7:b6:43:27:49:11:
6c:7a:19:ea:39:fc:43:d7:6f:b3:96:a6:39:de:f4:
07:a3:fa:f2:25:9b:f5:58:0a:38:5e:18:4f:e9:f6:
a2:16:76:54:96:29:73:70:ed:05:e2:96:37:83:3f:
1c:58:a5:e2:6a:fb:8c:e2:2d:c1:5a:c7:5c:a4:62:
44:1a:5c:2d:8d:35:76:97:8c:c6:f2:f7:57:93:ec:
7a:1b:cc:3f:57:a3:aa:0a:ee:be:e0:ee:a8:d5:ae:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:B4:FC:7A:F9:7D:58:0F:C9:71:17:49:A1:98:DE:F6:06:2A:FD
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:bb:0d:fe:e9:21:05:bf:9c:b2:4b:ae:b2:d7:44:41:8f:
42:db:05:e9:a6:40:b7:e8:79:cd:1c:7a:e4:af:dc:66:6c:a2:
db:57:20:93:0d:04:66:cd:16:39:78:36:d6:ff:70:69:95:ba:
a1:71:3b:41:a4:b1:7d:65:dd:2c:47:75:9f:f0:0f:07:aa:8e:
06:00:25:43:66:ce:d5:4d:c3:52:e9:a7:c5:03:85:f6:24:96:
92:ce:13:61:38:59:b4:3e:c4:ee:34:3c:19:5b:1d:78:9b:eb:
f4:2f:cb:97:95:48:93:93:50:8f:e8:7a:26:08:06:b1:e9:0c:
c9:db:b8:e6:99:a9:97:7e:a7:88:f0:55:80:de:52:13:cc:c1:
d5:47:57:44:93:57:08:66:90:5a:a6:0f:55:4a:85:dc:b4:d3:
62:57:7c:18:ce:27:60:96:5a:ec:e2:da:2c:74:0c:b5:23:f2:
38:83:f6:4e:42:e9:69:f3:83:81:3e:19:3f:16:89:73:15:d8:
1e:87:a9:d1:c9:27:ea:5d:fd:e0:8b:8c:4c:ee:c9:99:12:cb:
23:a3:62:60:5d:22:a8:d7:1a:95:ca:7f:1e:79:1c:b1:34:84:
cd:a5:aa:cc:7d:30:8c:8f:5b:18:9b:fe:03:88:49:1c:11:05:
dc:30:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:19 2025 by rpki-client