Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: YxuSuCIlxq4BXLLhyR50TvWf55Pjkl2dnzWNk2ms+6I=
Subject key identifier: 2E:EC:4A:6D:07:DA:52:F8:C5:31:74:BD:39:47:58:23:A8:B7:92:CE
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 01987C09BF94F76343D39D2C23DB9192EDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0752
Signing time: Tue 05 Aug 2025 21:01:10 +0000
Manifest this update: Tue 05 Aug 2025 21:01:10 +0000
Manifest next update: Wed 06 Aug 2025 21:01:10 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: WdzZRmb69ckJ2RB81cQipsvNt5Exbi5HQR4SRJG08sY=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:bf:94:f7:63:43:d3:9d:2c:23:db:91:92:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Aug 5 21:01:10 2025 GMT
Not After : Aug 6 21:01:10 2025 GMT
Subject: CN=2eec4a6d07da52f8c53174bd39475823a8b792ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:13:38:a9:69:a0:8f:ec:33:25:f4:67:be:
a0:0a:e0:39:41:4e:6e:4e:2f:d0:63:a7:0f:5a:6b:
37:09:15:97:67:05:86:d2:c2:92:c6:1b:3a:28:d7:
76:56:b1:4b:b8:16:91:a6:5b:c6:44:0a:f2:7f:4b:
be:94:6e:77:f1:90:fa:e7:9e:2c:7a:f4:40:d0:dd:
f4:de:6c:e7:2f:ef:58:51:48:23:53:1f:3e:4a:84:
8a:b8:4c:b9:6a:18:6a:f3:a9:0f:ed:53:e7:dc:25:
b8:a6:ba:ac:40:7e:64:0b:26:f3:5d:40:46:49:b1:
3e:0b:bb:1e:67:cc:3f:db:14:ce:56:fa:60:21:28:
a1:66:fd:f5:a9:67:9c:a7:b6:db:1b:b7:23:6d:c6:
38:ab:0c:61:36:e9:47:06:f5:b1:a1:f8:56:d4:a8:
aa:9a:d8:c5:ea:77:cc:01:a3:32:c2:65:cc:c4:71:
dd:d9:09:9e:a6:1a:46:85:34:e5:0c:c3:8d:ad:bd:
11:7f:2f:12:73:a1:0d:25:89:b5:18:a5:84:a4:d6:
b1:c5:44:67:a6:37:c5:c1:90:3d:83:e9:ca:29:f3:
27:06:8c:91:85:f1:67:98:72:80:6b:0d:1b:f8:52:
49:a1:3b:43:94:4e:ae:03:84:eb:b7:ed:69:16:7c:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:4A:6D:07:DA:52:F8:C5:31:74:BD:39:47:58:23:A8:B7:92:CE
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:29:ea:34:01:d5:f3:ac:10:ab:94:49:42:5e:f1:95:84:5c:
93:93:3e:b8:8b:55:1c:c2:8e:31:db:5c:5a:59:4e:41:4c:5b:
1e:aa:a9:d2:e5:43:c6:3a:1f:ff:f3:96:8c:96:65:10:5b:68:
93:35:e3:ac:51:e7:fe:3b:a9:26:c0:39:04:fa:d6:0b:7d:96:
b1:e3:14:60:d7:64:96:ca:a8:8f:8c:62:4d:64:f3:49:45:5b:
fa:28:01:58:52:db:7e:a9:35:c7:ac:e3:99:08:4c:7a:d6:5b:
bd:07:37:a7:75:7a:ff:a7:f7:c0:52:12:56:a5:15:f5:6e:31:
97:c7:76:c0:22:5e:7b:d4:c2:c5:f4:d3:bf:7d:43:20:27:86:
b7:6b:46:f1:4d:07:43:3b:7f:e3:05:33:d2:4b:f6:07:06:0f:
ee:37:e3:66:37:a4:e8:af:84:b1:c2:01:b1:23:e7:8c:6d:12:
64:b5:63:81:a2:c9:09:6f:2f:6c:ab:49:2b:c8:ab:07:43:61:
dc:87:46:08:c2:df:3a:51:d0:22:49:b6:ae:d0:a7:ff:a6:54:
ce:8a:a6:1e:12:ed:d7:52:dc:49:23:89:c3:30:bd:e4:8f:c4:
36:89:fd:89:3f:a5:ed:ea:97:ed:63:51:1d:d7:e8:64:af:15:
e3:8f:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:46 2025 by rpki-client