Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: 9Qpt29ceBFfMsn2fMEn9azsCu3razxNkbOzBD/ZEjcY=
Subject key identifier: F2:6B:ED:25:1C:54:94:59:6F:E0:3A:93:1B:DA:0C:86:F5:D2:6F:9D
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 0199FB7C8744291F46B8FBD74346C95EC042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 11C6
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: LsIMWaH6Irnhomg/u6trq2hjj5ZrGTraIuu9Cx9J3OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:44:29:1f:46:b8:fb:d7:43:46:c9:5e:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=f26bed251c5494596fe03a931bda0c86f5d26f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:d0:c8:cb:cd:2e:d3:8d:ee:8a:9d:df:97:
31:c6:56:eb:be:5b:98:17:9c:fe:d4:76:b4:36:d3:
5b:ec:eb:55:6b:e8:15:8e:fd:92:7b:f2:a7:fd:1f:
0e:31:a4:34:d7:63:4b:fd:fc:57:18:05:de:d0:02:
8c:61:9b:7d:91:46:4c:28:c8:25:8a:be:18:ac:a6:
2e:af:90:fb:34:0f:90:c0:b6:99:cd:32:96:e7:c4:
c4:ca:38:bd:69:d8:bd:67:22:6f:39:91:2f:bc:99:
85:ab:d6:b0:23:20:88:02:4c:d1:d1:78:69:8b:6e:
a7:75:50:f4:e0:fc:82:59:fa:b2:aa:b7:9c:da:f2:
5f:d0:60:69:d8:de:5e:b5:53:d7:8f:1f:71:df:1f:
72:9e:25:2f:b2:3e:4e:76:ef:66:16:f1:fb:40:28:
fb:dd:f6:c3:9c:69:5e:95:29:ce:cb:6b:73:b0:37:
8f:ad:a6:14:bc:52:a1:72:33:d0:0a:cb:5e:86:c8:
05:4d:14:b4:c7:5c:ff:5a:e4:de:90:12:94:63:29:
81:b7:9c:f3:9e:88:12:47:f1:ea:9f:5f:11:8d:d6:
86:f6:8e:05:ae:c2:ac:c0:74:78:99:ac:a0:ca:f9:
f5:b3:11:61:0f:92:2e:7d:8c:b4:b4:c1:0b:e1:79:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6B:ED:25:1C:54:94:59:6F:E0:3A:93:1B:DA:0C:86:F5:D2:6F:9D
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:95:46:dd:60:d7:21:bd:94:ba:0c:2d:dd:7a:ed:12:58:af:
4a:23:1e:c1:a5:5c:9a:e5:30:9e:57:2d:ba:51:f5:f7:ff:6b:
15:05:90:74:12:1d:ab:9d:34:e6:31:9e:11:dc:67:45:a8:ed:
e2:2e:fd:ee:6f:02:64:c7:a7:98:fd:c3:1d:1f:3d:7a:b0:2a:
06:ad:29:4f:39:5f:4c:4f:54:42:73:6d:47:69:ba:5a:dc:b8:
10:fb:25:49:be:4c:99:d3:bb:12:55:32:1e:af:61:64:08:19:
34:1a:2d:06:13:88:ad:c2:d2:0c:20:d3:f2:b9:b2:c6:68:39:
dc:39:41:be:15:f0:5a:d2:f7:fc:f5:39:c4:86:a9:c4:32:9c:
2c:67:ea:06:5d:f9:a6:37:2c:ae:c5:06:1c:6c:67:51:fa:b0:
6e:36:12:b6:9f:ba:b6:ba:68:77:f0:f8:04:cf:ad:64:a1:a5:
ed:07:e6:ce:21:14:54:86:1e:a6:db:54:63:1e:31:a1:38:ae:
7f:35:74:67:26:b9:64:1e:16:43:2c:2d:c7:ec:3c:47:88:a7:
cd:1a:41:5e:20:18:1c:27:53:75:2e:27:73:19:38:d6:49:f2:
05:ff:16:e4:a9:21:58:3e:87:b6:49:97:04:68:d4:6b:3b:b4:
92:68:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:38 2025 by rpki-client