
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json)
Hash identifier: KL35eeX3AGKGz6iDMnPJzKiYQpL1gHza0Lyq4tpkR3o=
Subject key identifier: B5:1E:6E:F0:DA:16:32:18:69:DF:63:1D:4E:B7:DF:7F:73:74:AA:CB
Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Certificate serial: 019873742D16E37EFDDC4FDB07696D622EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 05:00:50 +0000
Manifest this update: Mon 04 Aug 2025 05:00:50 +0000
Manifest next update: Tue 05 Aug 2025 05:00:50 +0000
Files and hashes: 1: 9YQA36vAku85UbE81d8YCXXLJnY.roa (hash: Aeb9cL8NYmy9yNSDJcp65b2WQtEKFZt794slbkjrbPk=)
2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: pNhmd9J4b1AdP7zb349VBN5iKbe4TJFk7gE56u15zG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:2d:16:e3:7e:fd:dc:4f:db:07:69:6d:62:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Validity
Not Before: Aug 4 05:00:50 2025 GMT
Not After : Aug 5 05:00:50 2025 GMT
Subject: CN=b51e6ef0da16321869df631d4eb7df7f7374aacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:5e:74:f0:b1:57:3a:96:b5:2d:c2:7f:4f:
81:85:e1:55:33:54:f6:34:88:43:9c:e7:97:01:f2:
36:8a:cd:42:08:17:d7:78:5b:d2:8c:65:99:f7:c2:
9c:85:77:40:73:47:6d:e0:be:1a:6c:f2:24:f4:72:
65:a4:88:66:d9:bd:41:cd:7c:4a:8a:a5:b4:dc:b2:
22:7a:3b:5b:ce:a7:ef:9e:65:6d:be:ab:ad:b5:fa:
23:14:41:8b:aa:1b:2f:53:0d:90:70:f0:48:b3:83:
ab:0c:15:8e:c3:59:66:30:7a:3e:b7:de:44:15:24:
9e:b2:5d:67:55:cf:e3:f6:48:81:9f:9d:c3:ab:d8:
e5:97:7f:5b:f9:4f:7d:26:5d:86:10:af:6e:26:1c:
3c:d3:89:ef:9a:f8:8e:50:6c:a0:df:8c:2b:47:f6:
aa:33:da:19:32:f1:e0:cc:2f:3f:5e:54:48:99:cd:
0b:11:57:d5:d1:29:c5:9c:75:fd:b3:6b:5a:82:d2:
d5:88:3e:77:af:2f:2c:c3:3a:66:73:b4:35:a1:41:
33:d5:4d:5f:4f:d0:d4:99:c7:92:1f:22:db:fe:7d:
b3:78:9d:3a:6a:5f:ec:51:fe:d3:2e:da:5b:01:e5:
fb:05:86:a2:31:70:54:16:77:f0:d9:4f:52:06:c9:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:6E:F0:DA:16:32:18:69:DF:63:1D:4E:B7:DF:7F:73:74:AA:CB
X509v3 Authority Key Identifier:
keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:08:df:21:34:b0:1c:de:ad:bd:0f:0b:ea:ce:3e:af:6e:60:
42:9f:2e:7d:1b:91:51:9b:66:4c:b7:25:10:b7:c9:ba:3f:fb:
d5:db:c4:92:0b:78:d4:90:02:64:09:25:8a:5b:b8:d2:62:1f:
10:df:aa:74:04:6a:e0:68:24:c3:42:ff:15:5a:1d:5d:05:91:
f2:6d:9c:2f:c7:a2:1a:dd:f9:06:82:3f:57:6b:98:d8:5b:6e:
9f:7b:17:08:d7:ce:96:47:78:92:51:a1:5e:11:35:e9:00:8d:
b0:32:7b:93:24:10:05:5f:41:25:0a:04:de:22:11:89:78:0e:
7e:d9:e5:11:b1:23:b5:8c:d4:1f:8c:21:d1:fb:71:08:20:12:
4e:21:a4:74:cb:a3:4d:c7:20:27:ea:ce:a8:3b:4e:af:82:5c:
a8:14:de:77:07:25:65:58:67:5a:27:93:30:6b:13:1d:0b:24:
2c:1e:ba:87:74:12:af:fc:b8:d7:05:17:13:7b:b8:35:f8:ea:
bf:3d:96:ca:78:2f:fa:79:c2:b4:b2:fd:7c:bb:3d:02:dc:bf:
1c:cc:f3:9e:a5:fd:e0:3d:ae:c2:9d:1f:fb:0d:03:c6:5d:d7:
d3:e1:f3:21:5c:fe:b8:62:be:87:c7:48:73:9c:bf:4f:d7:58:
80:36:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:07 2025 by rpki-client