Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: y8MemKbLfO/GfJUFF2EiE/+bhKNRN9AxdTAzlsgFSv0=
Subject key identifier: EE:B7:66:D7:81:89:03:43:4E:83:F2:E3:CD:9D:B5:69:13:88:2D:6C
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 0199FC584D1ED946A8DD60695C66C74CEBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 0352
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: OejDM+0M0NJTs5ccVWvsrgISUp9Ytu46GhcjwkEIn6g=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4d:1e:d9:46:a8:dd:60:69:5c:66:c7:4c:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=eeb766d7818903434e83f2e3cd9db56913882d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:bc:64:e6:31:6f:2b:b5:54:ea:15:3c:81:
05:98:31:59:69:a3:7b:14:ed:fd:25:c6:61:75:c9:
01:12:74:3f:64:7c:38:03:b0:b7:0f:d9:ba:8a:d2:
06:0a:bf:b4:31:7d:3a:14:7f:e7:52:3e:a0:d7:4d:
ec:55:12:85:af:9c:f5:4f:83:5c:d1:b9:c4:89:a0:
6e:25:74:28:c8:9d:fd:e5:ed:3c:5d:37:66:5b:d6:
95:7a:91:9f:d2:b6:7b:3b:0b:40:2f:b4:a8:eb:1d:
21:d2:a7:59:75:b6:da:01:92:a3:a0:f9:3f:47:d3:
ee:7d:ee:e4:ec:05:70:82:fc:c1:d9:d3:2d:09:db:
34:0a:c7:b1:5a:85:13:67:fe:71:da:90:2b:7e:92:
db:eb:ac:ad:b1:4e:c3:c3:e3:2d:f7:3a:95:96:c2:
6b:2e:a4:95:57:51:17:36:37:bd:21:51:c7:73:8b:
8b:8f:b1:8e:56:1c:18:09:c1:e2:e8:90:71:d5:86:
df:e7:92:ce:a4:a8:7a:55:77:e6:5a:8d:cc:54:34:
92:c6:db:0d:3e:14:b4:84:15:3a:38:76:84:a8:28:
45:51:17:5f:a4:29:06:45:40:a1:76:df:c6:b7:86:
d4:4f:5b:35:bf:8a:21:02:f8:18:83:6c:33:d2:0e:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:66:D7:81:89:03:43:4E:83:F2:E3:CD:9D:B5:69:13:88:2D:6C
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:00:b3:2e:bd:07:a9:2b:92:74:ff:24:08:b0:98:72:cd:72:
6a:f3:bf:1f:4f:fd:fe:b1:8f:43:0d:92:ab:3b:9b:0a:b5:1d:
d0:6b:f6:db:8d:34:fa:b9:79:c3:e8:db:c8:36:04:6f:54:53:
e4:57:fb:2a:9b:01:cb:c5:11:bf:56:cb:47:45:cf:1d:aa:c6:
d0:a3:12:4b:47:46:74:c0:ba:c3:b1:f7:c6:af:62:35:a1:f4:
b9:e6:55:3d:bb:b9:5b:5d:07:73:ab:4b:81:b3:34:1b:18:5b:
c2:b8:4d:dc:ee:d3:6c:75:ed:61:38:5b:be:4c:12:29:ef:3a:
d6:50:b5:6f:a0:b6:1e:91:cc:7f:80:a8:50:df:b3:d5:aa:d3:
17:a5:e0:b8:22:0c:ce:20:f4:a5:2a:97:a1:0a:62:3a:7a:5e:
2f:37:ce:16:26:98:a6:c0:81:f7:9e:39:50:e2:87:1a:ba:4f:
63:ae:3f:3b:65:3c:1d:fc:25:bc:7c:06:c8:07:63:cc:9a:41:
3e:fb:26:75:7e:c0:7e:01:7d:43:e8:e6:92:23:50:77:04:ad:
6c:9c:fc:c4:e0:f9:1b:73:ef:e2:83:95:c1:fb:bd:f2:61:c3:
d7:f6:27:68:1c:b0:ee:1f:b5:86:35:a9:02:10:63:c7:60:f2:
43:36:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:49 2025 by rpki-client