Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: gR5JUihGioNOEkso71pOMUQH0gPaCALWmTGKxP9qR8Y=
Subject key identifier: C7:21:9D:90:DE:82:83:60:DD:86:5B:CA:97:4E:2D:4C:24:42:B7:B1
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 0199FE1004DADAF43F49E7518DA412CF5E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 034C
Signing time: Sun 19 Oct 2025 20:01:26 +0000
Manifest this update: Sun 19 Oct 2025 20:01:26 +0000
Manifest next update: Mon 20 Oct 2025 20:01:26 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: JF71/xEt4KdIvilmo3Cx3ImDoe57V3+je+78LPPqpUc=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:04:da:da:f4:3f:49:e7:51:8d:a4:12:cf:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Oct 19 20:01:26 2025 GMT
Not After : Oct 20 20:01:26 2025 GMT
Subject: CN=c7219d90de828360dd865bca974e2d4c2442b7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:b1:94:25:89:cd:a2:d0:a6:52:15:1e:bc:
98:b2:98:06:f6:64:d4:8f:cb:22:3a:83:ff:b0:58:
c3:8e:8f:28:d7:aa:5d:55:24:65:3c:45:59:77:5b:
b1:c6:84:48:27:d9:4a:26:cd:08:17:ee:73:de:e9:
a5:9f:6d:f7:1d:18:02:f7:cc:43:0f:d7:8b:49:46:
e2:20:cf:70:41:bf:d8:17:a0:a4:d8:3c:54:e4:57:
bd:05:1b:f5:80:0c:fe:8e:57:fd:0a:2a:6c:87:12:
1f:4a:6e:30:70:64:91:5a:83:9b:67:7f:8b:15:bb:
10:97:5d:ac:04:72:de:64:49:86:56:a1:83:b5:20:
88:e3:97:5c:11:08:a9:2e:ec:33:28:6d:05:e8:52:
ff:97:fc:48:69:dd:f6:e0:d4:e7:53:3b:47:8b:2c:
14:38:22:aa:46:83:86:5e:a0:7d:b7:e3:cb:c4:c3:
86:3b:81:9e:a2:3c:b2:b5:37:dc:71:98:d4:c4:0a:
4e:09:9e:09:3a:cd:0f:2c:e7:23:3b:e7:47:1b:77:
3a:73:ab:0b:75:67:d9:1a:c6:17:7f:28:d7:61:ed:
1b:4b:25:fb:64:53:ce:4b:13:bb:c4:d1:5c:a4:39:
3c:12:1b:b6:0d:ce:5f:bb:3e:f2:3a:8c:36:91:ec:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:9D:90:DE:82:83:60:DD:86:5B:CA:97:4E:2D:4C:24:42:B7:B1
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:73:34:d3:89:66:7e:56:f1:4c:1c:2f:29:2f:93:1f:ab:63:
ae:bb:48:9a:0e:49:38:1a:83:f6:e7:b2:7c:d5:de:7e:78:98:
40:90:79:51:6f:15:2a:92:38:26:86:2a:27:e3:4f:c5:98:dd:
8b:4f:c0:7f:7a:9b:cb:b9:a4:54:0c:de:25:58:d1:a7:71:85:
9c:f2:22:d4:b7:4a:4d:ac:83:89:1c:c3:10:5c:2c:cc:eb:a2:
7f:6b:fd:3a:32:69:80:47:8e:44:a5:08:8d:b6:cd:dd:de:9d:
f9:e8:fd:44:74:01:cd:4d:da:89:d1:ad:36:71:cb:ca:17:8e:
b6:fc:56:b1:03:17:92:3b:85:6e:e1:8d:01:60:bb:24:48:eb:
05:22:e6:12:18:73:5f:66:40:bd:19:af:37:4b:b1:bb:20:27:
79:be:d6:38:72:36:10:4b:c2:e5:ad:cc:e2:d4:01:27:50:58:
a9:62:fa:f5:ea:55:16:10:5c:bc:0f:14:ef:e2:a3:4b:67:f6:
d2:cc:80:ed:4b:80:0b:fa:93:ee:ef:c9:c1:34:7f:8a:11:3f:
0c:07:98:f7:2b:fb:76:f0:5b:1a:16:9a:9a:79:ab:1d:ee:1d:
d9:08:fc:20:19:b1:99:df:9b:bb:96:b8:4a:c2:db:87:3c:0b:
8f:8a:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:04 2025 by rpki-client