Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: Luz56Jn9yvOZ68gk5G7JvfKRpHYNxYWBloeq6Hy1pfQ=
Subject key identifier: 89:7D:1D:80:D7:FF:3B:40:BC:6B:2B:32:02:46:8E:D7:37:D4:20:96
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019873E3599859A6228CDB45734DBD442875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:02:16 +0000
Manifest this update: Mon 04 Aug 2025 07:02:16 +0000
Manifest next update: Tue 05 Aug 2025 07:02:16 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: avPTjPMLLtTMdoFIWWPESWUf2HV8pM57TwYbGJQ7VL0=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:59:98:59:a6:22:8c:db:45:73:4d:bd:44:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Aug 4 07:02:16 2025 GMT
Not After : Aug 5 07:02:16 2025 GMT
Subject: CN=897d1d80d7ff3b40bc6b2b3202468ed737d42096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:0b:5c:29:72:ce:08:7e:93:65:ad:e3:9a:
a8:b2:95:a7:5e:09:92:29:eb:db:03:ad:07:a0:20:
02:68:05:ce:00:b9:2e:eb:d2:62:a7:75:b9:e7:dd:
c2:0d:3f:e5:ff:0c:ed:9b:b2:39:45:12:8e:ab:10:
9a:35:ae:1d:8a:42:66:7f:46:8f:3d:ef:47:0f:e6:
e6:d5:c2:c7:ac:18:75:33:20:85:61:14:ab:d4:80:
a5:be:1e:60:74:22:cc:07:15:0a:85:a8:35:cf:00:
53:b9:4b:c1:fb:84:b3:3d:83:26:c0:48:19:5b:5a:
7a:0e:48:64:e1:19:dd:a8:54:92:07:4d:08:e6:60:
67:68:d0:41:ba:26:a6:42:26:bb:13:da:75:fa:9a:
37:3a:74:ff:ac:79:3b:9d:0e:2f:64:e8:72:ac:d2:
1a:fc:02:f1:06:10:a1:d1:7b:1b:17:ab:4f:44:3b:
d1:d2:cc:02:01:39:e9:d1:cd:f2:21:b3:3d:a0:fc:
ea:0e:1d:fc:b6:a2:2d:08:b8:f3:85:b3:85:1c:be:
79:bf:42:15:58:66:e6:b8:3e:1a:aa:9c:16:92:32:
01:af:56:ac:75:9d:24:78:a0:56:4c:32:3f:27:2a:
57:18:dc:18:5b:17:6b:9d:60:22:d6:32:23:b1:fc:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7D:1D:80:D7:FF:3B:40:BC:6B:2B:32:02:46:8E:D7:37:D4:20:96
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4a:29:ce:c7:5a:6f:31:c0:7c:90:14:82:ed:ba:3d:89:ff:
bf:80:dd:4d:a6:a6:a9:19:67:f3:07:4c:7a:da:01:0d:a5:e5:
ed:db:2e:34:b7:c6:b0:41:62:b3:72:e2:b3:e9:0c:fe:61:8c:
12:9f:7f:ab:bd:5b:35:86:3e:33:56:27:e8:2f:1a:9e:37:14:
c0:a5:1e:95:a3:04:27:4b:54:0e:69:5e:75:04:c8:d7:a4:31:
d1:41:93:3b:78:7c:55:ef:04:20:94:77:b2:db:c0:e9:a6:f2:
27:e2:e6:53:fb:0e:2f:6c:14:f8:1d:b8:7a:62:75:db:9c:d0:
00:6d:69:22:03:ed:38:1b:98:b5:d7:ae:d8:66:c5:29:0b:de:
79:28:3e:f0:b8:6a:ee:e6:44:db:c5:ea:87:5b:79:99:0c:a4:
3f:a4:51:dd:f5:65:0d:78:e6:d8:14:55:0e:c1:35:e2:6e:35:
58:4d:48:51:85:87:86:d7:85:f4:c7:64:0e:6a:36:b1:58:d8:
09:1f:e8:47:d8:6a:0c:df:4f:a9:42:ab:70:14:fc:e6:ba:14:
32:e8:3b:9c:7b:ab:78:69:46:a1:53:3a:6e:30:e5:75:c7:78:
ed:30:98:5f:8e:5b:33:4f:07:1f:b4:a6:4a:10:e2:98:c8:af:
63:eb:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:58 2025 by rpki-client