
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: MDuVgwgDmgaYWSQXK/oEPyAkW7H1S0U9k4RBMGX5EzQ=
Subject key identifier: CD:3A:97:DC:CB:72:0F:E5:19:74:CA:F4:42:37:8D:6A:EC:C5:63:82
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 019890D9EB20BE41B9074F062759D2774C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 22:00:57 +0000
Manifest this update: Sat 09 Aug 2025 22:00:57 +0000
Manifest next update: Sun 10 Aug 2025 22:00:57 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: uWTHEUm+vRPujQJ5KaTFigkKo6tcIajIeTrClfqbfUg=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:eb:20:be:41:b9:07:4f:06:27:59:d2:77:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Aug 9 22:00:57 2025 GMT
Not After : Aug 10 22:00:57 2025 GMT
Subject: CN=cd3a97dccb720fe51974caf442378d6aecc56382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:97:83:78:7c:13:84:b5:a1:7e:90:e2:37:
68:9d:df:d4:93:90:a9:57:cb:d1:3f:30:2d:8d:d4:
f5:44:34:79:ed:10:2f:7f:4b:07:af:c8:68:35:e0:
5a:89:35:47:c5:76:28:38:f5:da:cf:9e:01:c2:e9:
e7:d8:a5:87:09:b3:f2:a7:0c:a3:9f:bb:43:a1:94:
bc:ae:0a:7e:cf:11:cf:17:df:0d:df:93:28:8c:97:
86:01:64:ed:1e:0f:b0:81:8e:c4:fd:9d:36:5a:fb:
fb:12:11:b1:04:5d:a3:be:57:77:20:1d:da:1d:21:
6b:f4:f7:9a:14:dd:b4:73:cd:ae:2e:aa:7e:a2:66:
92:9a:93:f3:c5:93:a5:29:43:4a:3d:ff:0f:5f:c2:
74:9d:a8:dc:45:d1:31:51:d5:34:ab:b8:98:ee:fd:
e6:7e:52:48:51:10:3e:78:3e:f5:cc:94:8c:27:39:
f0:92:f9:4d:0a:d9:9e:c3:92:ae:7f:ca:af:6f:89:
d8:43:66:af:df:5e:65:98:ec:46:8f:55:40:26:ce:
06:24:d8:e3:ca:71:a3:76:00:00:92:d4:fe:da:53:
ae:b9:d4:f2:bd:3a:7f:41:46:96:f0:b3:75:1f:92:
af:3b:2c:c7:3f:aa:97:ac:80:24:b6:fe:39:2d:03:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:97:DC:CB:72:0F:E5:19:74:CA:F4:42:37:8D:6A:EC:C5:63:82
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:df:cc:5f:30:42:99:ed:c0:22:9f:93:77:20:d8:ad:a3:
cb:50:69:65:53:91:09:72:1f:0e:bc:c3:a0:6c:68:ff:5f:1a:
22:31:39:aa:c1:4a:d2:c2:22:21:3d:9f:df:4c:3b:8e:91:b7:
b4:ab:4e:d6:48:eb:57:f6:ee:d2:87:33:4b:98:c4:51:74:ec:
f4:bf:b9:96:d6:5f:cc:67:1f:32:f9:c2:8d:90:51:60:fd:f7:
33:1f:5e:9f:63:71:37:df:52:cb:8f:ba:34:da:c2:c9:80:72:
1d:fd:ac:d8:43:91:a8:85:12:71:bf:ea:b2:bf:bd:a3:48:36:
c8:44:46:0f:74:95:ea:78:05:0d:da:fc:1f:9d:f8:4b:18:21:
f8:b3:3e:0a:6d:56:e8:df:d0:3c:1f:40:92:51:00:30:c6:3d:
c0:03:01:20:c0:cf:95:b7:40:ec:57:b5:91:78:c2:b9:8c:0c:
98:bf:46:7d:75:67:56:96:d3:e3:ba:a0:af:de:9f:eb:f4:77:
93:51:46:37:22:d6:4f:5d:07:d2:da:18:a4:14:36:73:98:87:
ce:38:e7:a7:30:5f:8f:10:22:21:41:f6:3f:f6:ba:a1:af:f5:
8b:30:64:00:98:e1:12:ae:66:dd:6c:1a:15:18:97:39:3b:4f:
21:e2:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:35 2025 by rpki-client