
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: qBp+5sZkrFVd5uj18dePSN1QwhM4Mf7HpwF5Hu8en80=
Subject key identifier: FB:55:CE:A6:A3:69:9A:BE:57:10:8F:AF:81:6E:A2:4D:5B:7C:4E:8B
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 019874507A1396E158AAD073EAD77AAEA838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 0163
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: bbjl7IE5NkpFq0gZRTKU6spX4njtZZyRYd8OuX38GvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:7a:13:96:e1:58:aa:d0:73:ea:d7:7a:ae:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=fb55cea6a3699abe57108faf816ea24d5b7c4e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:33:d4:d3:80:06:ad:b9:34:db:16:e6:7a:
57:3d:e8:20:7b:b3:8e:8c:d4:60:a2:72:f4:b0:e2:
b0:40:56:14:66:2a:b4:42:97:a1:56:07:6f:6c:63:
1a:d8:d1:94:16:d1:80:5b:1d:85:7a:83:1e:28:71:
6b:91:32:e0:b7:e9:43:fb:99:32:15:1a:58:c4:86:
f9:4b:76:fb:e8:ed:51:8a:b4:63:b5:14:6f:06:34:
53:b0:fa:d9:63:41:65:47:a5:6a:dd:7a:30:84:96:
45:7a:12:aa:be:3d:32:e6:e0:c5:15:fc:ed:65:36:
e4:6c:91:4c:eb:e2:d2:52:66:26:03:cf:e5:2f:c0:
79:d7:2c:fc:98:f3:60:47:32:a9:39:7c:d0:9f:8f:
48:36:b0:89:7b:2b:75:d4:a9:c3:e4:81:8d:c0:22:
1c:c0:17:56:e9:be:33:c4:e4:ae:8a:85:87:cc:56:
3f:2a:9e:f4:73:12:94:4c:72:6f:6b:bf:55:0e:7f:
01:b1:aa:03:76:cb:79:03:4b:0e:16:35:d7:ef:85:
18:1c:10:a6:22:51:5f:7b:f9:83:0a:b0:12:e9:fb:
2f:35:bb:33:ea:37:fd:3a:28:5e:68:36:73:4d:84:
cf:28:63:d5:33:45:05:2d:34:00:2b:ec:47:c4:10:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:CE:A6:A3:69:9A:BE:57:10:8F:AF:81:6E:A2:4D:5B:7C:4E:8B
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:e7:36:6e:5a:13:21:97:3e:44:01:5b:4b:9f:ae:22:3f:
01:60:6b:b4:5a:b8:8e:7f:d4:a5:dc:d1:3e:0d:c1:4e:1f:79:
f4:b2:43:b0:f0:0a:b8:3d:c3:7d:1d:de:c3:46:e6:f5:1e:84:
8b:79:d1:c2:02:bc:87:94:75:57:e1:fe:a6:b2:45:11:99:94:
7c:b8:3d:cf:50:1a:ce:63:90:07:55:06:df:c4:a0:e0:ef:d2:
4d:02:cd:0d:a7:90:1b:48:26:b5:5d:bb:a0:60:de:25:5c:b9:
ba:68:90:ee:3a:f6:d4:95:7f:97:4b:a5:3e:e1:c7:b7:9b:10:
bd:ba:19:49:b9:46:25:71:99:f1:e6:11:3a:ed:51:66:eb:74:
ef:d5:b0:55:71:00:ba:3e:df:05:ba:8a:e3:f7:36:5f:28:7e:
bd:1b:b8:d3:dc:15:e0:8a:3f:df:3f:0a:d6:c7:18:29:50:68:
12:57:56:bb:a7:d3:6e:4d:1b:ff:c6:de:7f:6c:62:62:1e:35:
74:28:7d:ea:27:b1:04:6b:0a:fd:6f:b9:41:d1:7d:a6:5d:b2:
02:1c:45:e8:90:3c:84:5c:27:c6:e1:96:7f:05:a8:de:b9:25:
54:39:35:40:c5:07:e0:2c:ee:83:28:f6:9d:d5:8f:d5:05:06:
37:24:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:06 2025 by rpki-client