Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: jbMOnvgJuSgPOlQHA2BXD5cikYSUiVXyZsEC8VlFqdA=
Subject key identifier: 13:D5:0E:86:0D:AB:68:C2:FE:86:A1:AE:E2:0D:21:1D:0F:71:83:57
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 019873E24565402572DABDC09402C6373639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 10F8
Signing time: Mon 04 Aug 2025 07:01:05 +0000
Manifest this update: Mon 04 Aug 2025 07:01:05 +0000
Manifest next update: Tue 05 Aug 2025 07:01:05 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: aT7K5zvT2vYKqxUQjvi7RozaLvSQSYsOhuc2/A8dHQo=)
2: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
3: d9EHF0cDaJcn3746j8KfKL2Zqv4.roa (hash: pKGwqLxpRbKLmbEwO5SCI6mwZ/Q5ftoBq8dpQrgnuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:45:65:40:25:72:da:bd:c0:94:02:c6:37:36:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Aug 4 07:01:05 2025 GMT
Not After : Aug 5 07:01:05 2025 GMT
Subject: CN=13d50e860dab68c2fe86a1aee20d211d0f718357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:ca:54:00:b1:c1:8a:57:34:76:ef:88:b4:
54:71:73:96:f3:11:77:0d:9f:76:8a:cf:7e:c6:88:
33:6e:be:56:9f:b2:6e:1c:7b:57:46:a2:8f:91:e4:
e8:19:e9:4b:87:f5:e9:9d:e0:7e:c9:87:be:16:25:
5b:90:b4:17:b1:fe:6c:17:c9:09:c1:fa:85:b9:26:
95:55:5a:70:12:66:d8:82:a9:3b:85:49:10:88:13:
23:86:21:3b:69:42:f5:b7:ab:4f:88:b4:1b:95:58:
2c:32:bf:db:73:bc:1c:ee:6f:f4:79:69:7b:90:cf:
47:44:58:75:6b:70:5a:36:0d:0d:6e:62:99:dc:08:
43:74:d6:62:a8:16:68:ba:9e:ea:9c:78:49:90:e3:
34:b2:07:88:44:d9:db:2a:69:f7:a0:17:b6:f9:72:
39:1b:4a:28:51:14:d8:ea:de:e7:e2:ba:52:39:f2:
e0:dc:22:ce:f5:bf:58:76:0b:2d:0d:ca:b5:68:17:
7d:13:d8:a0:96:a9:30:e8:45:e9:5a:6c:ff:1c:03:
e3:2f:98:28:7a:61:3f:fa:ae:bb:f1:85:9d:16:72:
4c:20:02:09:5e:16:17:b6:73:77:a9:5e:01:a0:18:
5d:83:05:4b:58:27:39:85:06:91:ad:a9:a1:1e:93:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:0E:86:0D:AB:68:C2:FE:86:A1:AE:E2:0D:21:1D:0F:71:83:57
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:d6:e0:a2:5d:de:6e:5e:3c:39:d6:05:45:2b:41:0b:5a:
57:0a:70:2d:d9:5c:15:e4:55:e7:70:3d:4f:5f:f0:94:a6:9f:
d4:10:c2:5a:6a:e5:40:9d:e5:e1:f5:76:7b:44:ce:ef:cc:64:
8c:ba:ce:5c:28:7d:f2:66:01:53:c4:f0:d1:e1:cb:6c:77:92:
97:b9:c5:af:9c:d5:46:b8:6b:2a:2d:85:92:ed:6b:78:e6:27:
e1:a0:ef:1a:71:e6:ed:1c:22:c4:66:d7:53:3b:c5:ce:c0:70:
49:c4:1e:b4:91:48:21:b1:03:7d:1d:84:c3:90:45:2f:e5:01:
2c:7a:63:a3:81:c8:57:43:5e:9b:59:fa:73:b0:33:c7:f8:97:
0e:aa:8a:57:c6:15:df:86:37:fa:0f:3b:28:c7:cf:7f:24:88:
fa:a9:2a:c5:df:50:96:76:45:b2:eb:53:3e:62:a1:a5:8e:ac:
dd:1d:97:f3:46:93:66:12:71:06:0d:73:40:ce:5d:51:db:f9:
c7:5b:9a:6e:69:8e:99:af:33:5f:d0:9f:e1:38:a4:5a:f3:d3:
94:6f:f1:3d:2e:62:c6:da:e6:58:41:86:52:39:2b:b0:7f:9f:
af:13:90:78:be:36:4c:e6:de:7c:fc:fd:a0:e0:e7:a7:fe:03:
93:f1:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:07 2025 by rpki-client