
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: Qddec/BnMbVDiqp6H4n9h0vdNzSwLjwhdBSOvo3TQK4=
Subject key identifier: 1A:1D:93:D0:65:86:F7:FF:4E:6E:87:54:CB:90:CF:B8:E3:AB:C6:16
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 01988B7D47AF730308BFD3E281605589CA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0C21
Signing time: Fri 08 Aug 2025 21:01:40 +0000
Manifest this update: Fri 08 Aug 2025 21:01:40 +0000
Manifest next update: Sat 09 Aug 2025 21:01:40 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: h9aV3KukHRiJElSOwIpK6P0FLI2W1wVB59bs4tOQSTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:47:af:73:03:08:bf:d3:e2:81:60:55:89:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Aug 8 21:01:40 2025 GMT
Not After : Aug 9 21:01:40 2025 GMT
Subject: CN=1a1d93d06586f7ff4e6e8754cb90cfb8e3abc616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:0b:88:de:09:9f:3c:e0:25:01:70:fc:b8:
8e:e3:07:82:49:eb:d5:55:84:cd:c7:7f:1c:bd:19:
8b:15:22:19:bc:82:95:c7:a6:25:a9:8b:30:4b:1e:
4b:6b:f7:df:47:3a:a7:2b:45:45:b8:62:d6:89:9a:
19:9a:d9:6f:79:d1:2d:b9:47:c2:a9:84:b8:d6:59:
42:20:80:90:e5:4d:95:fc:d2:2a:9b:2c:9f:61:ab:
bc:39:d1:c1:f3:df:2c:38:f3:1a:02:c7:ef:5f:a6:
47:d6:d9:bf:ca:f8:43:6a:17:ca:01:12:4b:1d:c9:
61:4e:93:19:a0:e7:1d:9f:23:05:99:e1:48:47:32:
53:37:31:ec:04:cb:90:4c:d0:60:0d:fe:72:cc:49:
d3:5c:40:4f:85:cd:cc:0f:91:6f:2a:38:27:91:ab:
e2:00:53:7e:3a:94:59:ca:41:24:3c:c5:e0:a3:65:
dc:ff:6e:73:ff:46:b3:5f:15:d4:b7:bb:d0:7c:b0:
3f:9b:d6:8b:e7:b8:ca:3c:60:ce:bd:7c:6b:9c:ff:
26:69:91:c7:99:cb:47:40:20:49:53:8b:6e:98:14:
58:13:8b:49:3a:77:21:63:1b:bc:9e:02:01:5c:d6:
bf:74:e2:36:15:c5:d6:c9:30:62:59:8c:30:8d:ff:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:93:D0:65:86:F7:FF:4E:6E:87:54:CB:90:CF:B8:E3:AB:C6:16
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:dc:2c:a2:cb:ec:cd:ad:72:c5:2a:7d:da:de:f0:c5:05:49:
16:dc:e2:2f:69:0c:b0:f9:90:31:96:ec:0a:80:3e:3a:5e:02:
22:93:cb:3d:71:b7:b8:62:2f:ef:ff:a7:09:78:26:d7:1e:2a:
01:05:75:a0:5c:db:44:2d:71:12:14:34:4c:84:6d:fa:c7:c2:
b9:36:9b:b1:c4:12:1f:18:e2:f6:8d:23:d0:4a:fc:55:fe:cf:
7a:55:4d:ec:63:b7:8b:01:aa:0e:f7:85:29:3b:16:28:ff:19:
e4:37:69:e4:15:38:f5:ff:ce:40:12:18:e1:4a:fa:f6:d3:53:
8d:d4:2f:c1:40:44:e5:74:b6:ea:0d:6f:b3:3f:7a:ee:a2:f1:
e5:e1:e3:3e:3f:20:aa:27:fb:a5:6e:54:02:82:33:eb:65:2d:
16:d7:d6:ec:3f:b8:c2:38:de:6e:d4:29:1c:ef:e4:4a:68:d6:
35:29:ff:f9:74:8d:ae:3b:8a:24:e6:0a:e1:ea:71:27:b5:20:
2c:49:b1:bd:cf:1e:59:32:d2:c7:19:50:e3:6f:f8:f6:e3:0c:
7a:03:a3:a0:6a:67:70:4d:42:37:17:d6:8a:e9:f5:a3:e0:f5:
6c:a9:1f:46:f1:97:fb:7e:45:1a:94:38:cc:d0:9d:60:22:be:
08:2b:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:12 2025 by rpki-client