
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: PZb8p3CGcnuI7eSyI1QYItq4QGD8DsKBIld5OGYEoaQ=
Subject key identifier: 59:0B:F0:4C:32:E0:7C:4D:16:FD:9D:57:21:E5:71:BE:7A:BC:BF:97
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 01987298FAB0E8614BF89DDEF48127AA93C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 15B8
Signing time: Mon 04 Aug 2025 01:01:24 +0000
Manifest this update: Mon 04 Aug 2025 01:01:24 +0000
Manifest next update: Tue 05 Aug 2025 01:01:24 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: GkneoVQqAgR0oidKL87jxzkLf+FF59OsFampngbbVNM=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:fa:b0:e8:61:4b:f8:9d:de:f4:81:27:aa:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Aug 4 01:01:24 2025 GMT
Not After : Aug 5 01:01:24 2025 GMT
Subject: CN=590bf04c32e07c4d16fd9d5721e571be7abcbf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:0d:52:8e:c4:0f:60:22:45:64:61:54:0f:
e0:c7:c5:fb:db:7d:31:5d:0f:78:a5:c1:7d:45:5e:
3e:bd:69:10:48:64:cb:47:11:e2:ca:30:b8:5e:ee:
f2:94:ee:2c:43:ef:01:53:bc:54:96:27:63:29:26:
d2:ea:38:6f:25:51:04:8c:63:9f:8a:db:2d:88:b1:
f6:7a:da:59:50:d2:c1:27:00:bf:9c:a5:10:bc:3a:
1b:fe:42:eb:1f:6b:f7:1a:0f:79:4c:6d:d0:69:6f:
1c:0f:ee:9a:c0:b6:91:65:5e:c6:11:d7:8d:bb:23:
bb:a8:10:27:93:0a:e6:9c:32:dc:bb:51:f2:3c:dd:
e6:56:e9:b6:f4:fb:1f:14:0b:9b:c9:3f:83:3d:be:
1d:4f:f3:9f:18:71:12:b2:06:21:16:bb:81:9b:35:
60:9a:d2:c9:cc:0e:6a:b0:0d:bb:34:6f:a8:20:55:
ec:08:03:35:e4:09:e8:80:c1:77:51:91:54:17:a7:
1f:77:4c:2c:e6:ee:5d:85:e2:6c:a9:ce:67:35:06:
21:d5:49:df:83:07:73:0d:34:11:56:46:23:dc:c7:
00:15:a3:28:ed:8c:3a:f2:5a:20:99:58:46:a5:3b:
50:5c:12:10:87:d3:3a:17:be:e2:60:e9:e0:4b:26:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:F0:4C:32:E0:7C:4D:16:FD:9D:57:21:E5:71:BE:7A:BC:BF:97
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:04:03:92:ce:72:b6:25:e0:40:34:35:a5:42:87:42:51:
5b:d5:a8:29:9b:e8:92:c4:cd:ec:ae:b1:08:c4:49:60:1f:20:
d2:b2:2a:ed:57:9f:6c:86:ff:b9:3a:1a:1f:d4:43:f9:0a:33:
c9:82:55:89:32:79:d4:32:33:42:0a:c9:28:40:cd:74:31:6e:
a1:55:93:86:bc:73:27:2b:a6:08:20:90:4d:36:95:ae:16:82:
0f:6c:b5:8c:7f:dd:25:41:37:95:28:c5:7d:4c:bc:76:ac:c9:
a0:9f:0e:c7:da:39:a0:e9:18:18:bc:65:64:5d:07:d1:4e:87:
67:29:a7:50:95:88:15:06:7a:cc:da:d6:2f:bf:10:ad:39:fc:
51:7e:21:b9:c2:54:ce:61:aa:ed:fe:3e:0e:e0:f1:ee:92:9e:
b0:aa:9c:0d:14:8a:db:0a:fe:84:5c:0a:87:95:f3:9c:1a:4f:
34:03:a7:11:3e:51:17:36:bc:29:49:17:fc:75:4f:2d:c4:c5:
73:50:48:76:0c:1a:c8:ae:69:4b:88:84:12:2b:31:92:91:4f:
bb:06:87:29:38:72:92:b2:ed:20:9c:58:76:90:51:b7:f2:0b:
e2:76:c3:6b:e1:02:92:6d:72:e1:1c:c8:f9:d1:7b:f4:db:c0:
0d:1e:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:13 2025 by rpki-client