Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: qB94jN+r8OqQGm/20ipjx/VJWzLi8MZO+7PNLFvT5hM=
Subject key identifier: B5:ED:C7:57:6F:F5:A9:02:65:83:7F:68:E7:20:C5:22:6C:00:C0:16
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 0198808B5BB62C7D4A0B79E2E09F10919104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 0301
Signing time: Wed 06 Aug 2025 18:01:13 +0000
Manifest this update: Wed 06 Aug 2025 18:01:13 +0000
Manifest next update: Thu 07 Aug 2025 18:01:13 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: nGcOAW4SAnjPJwlXd/gQqPfJZj5Rt0Xizbr4l4l5mdE=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:5b:b6:2c:7d:4a:0b:79:e2:e0:9f:10:91:91:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Aug 6 18:01:13 2025 GMT
Not After : Aug 7 18:01:13 2025 GMT
Subject: CN=b5edc7576ff5a90265837f68e720c5226c00c016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:13:7a:e8:6d:0d:1c:50:e8:2f:d8:ce:47:
ab:6f:c2:68:f2:cf:02:c7:89:83:58:60:55:6e:c9:
9b:0c:91:a5:a8:aa:11:21:ed:1b:b8:67:3d:08:48:
b1:c3:a5:bc:2f:98:75:6b:1b:23:db:aa:b1:8e:ce:
68:b2:25:23:75:ee:97:95:ef:15:5c:6e:70:11:6c:
7e:cf:6a:99:c8:eb:99:31:34:4e:91:23:7e:a4:43:
19:8a:e6:eb:39:5c:ca:18:47:22:dc:57:fe:08:f7:
52:4e:cd:71:a1:50:f4:7c:f5:54:01:ba:42:ef:4c:
ae:24:c7:10:41:61:ae:0f:75:33:7d:2a:e7:52:c3:
f9:02:e6:a6:c6:cf:af:b7:69:7a:8c:49:b9:96:9c:
53:f6:60:cc:22:73:76:f0:a1:d0:32:63:69:86:0f:
70:f3:17:28:e4:99:2b:6f:df:32:f7:47:d9:00:ec:
a4:72:e7:49:00:2b:fb:09:d5:fc:99:f9:e8:82:c9:
a6:d0:21:c6:2f:26:1b:af:e0:25:97:f7:a6:c6:ca:
23:f5:45:96:89:12:99:3b:d2:aa:fb:0f:99:d2:ce:
c1:f5:f7:8e:5b:1c:00:5a:7e:7c:c4:82:9c:55:6b:
32:68:b1:72:e9:c6:60:90:a4:2e:09:5e:c6:c8:0d:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:C7:57:6F:F5:A9:02:65:83:7F:68:E7:20:C5:22:6C:00:C0:16
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:45:ec:81:ef:f7:8f:95:a0:fa:0a:c9:1a:bc:bb:a4:29:
81:27:96:f5:de:0b:b9:aa:ba:d2:ae:6f:b6:0c:50:bd:b2:df:
f3:49:c1:e1:74:04:b7:96:bd:1e:a9:6f:d2:1a:cb:77:26:c6:
48:b0:25:5e:d0:e4:31:98:47:7c:8c:18:08:2d:1e:00:a9:42:
f6:9d:66:7c:c3:74:3a:e5:f5:2f:b3:2f:40:b7:08:9a:5d:d9:
cd:0f:3e:bf:96:fa:c3:38:88:3e:1c:18:f7:fc:ea:a4:ab:fa:
4d:74:a1:13:ed:fe:cb:09:95:25:50:35:45:3e:85:4e:a3:f6:
65:e0:0b:38:e0:79:19:be:95:3e:e1:65:2b:50:7b:0c:b5:5f:
95:59:c2:62:dc:94:0a:0b:7c:7e:15:02:08:20:45:43:b7:07:
1b:f2:50:e3:18:ab:a4:1d:7c:89:d8:05:3d:d9:0f:dc:94:b5:
c6:db:33:a3:5d:11:67:63:37:31:11:1c:87:30:b1:e9:29:ca:
90:08:82:cc:dd:01:00:33:c9:d8:37:f9:5a:73:f8:72:e6:b5:
d0:92:a0:26:a9:1c:35:43:4d:f2:e0:7c:44:22:35:4c:70:75:
b4:80:60:ea:27:ee:1c:b7:8b:16:1d:bd:f0:0e:21:34:a3:a3:
a8:7e:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:35 2025 by rpki-client