Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: PRJKTUZiTHfnjHE7a9BMELIvFq/tGQGoafkWdwDSpiM=
Subject key identifier: 41:88:72:C0:16:66:46:AD:40:AF:11:53:40:3D:66:96:00:92:65:A3
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0199FD33E4DA76BD95A79CE848D4106F5B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0EB1
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: osssfB0pTKnCvYJ5DH5bF949+DJIiOBb8PF4aZtOYpg=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e4:da:76:bd:95:a7:9c:e8:48:d4:10:6f:5b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=418872c0166646ad40af1153403d6696009265a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:11:e6:13:e5:b8:f9:0f:70:1f:98:46:9d:
79:3d:4c:f4:de:99:7b:dd:3d:84:22:d8:7d:08:da:
5f:1c:fd:61:cc:bb:74:fb:ba:f8:46:98:4a:be:1a:
ff:c3:91:a2:2a:00:18:3e:ba:a0:e0:0e:98:a3:23:
bb:e2:80:4b:32:5d:c4:0a:9e:fa:dd:67:27:11:bf:
75:36:9f:cf:58:fd:82:93:8b:ff:8e:01:6c:40:2f:
fb:5d:f3:d8:ed:fa:20:33:4f:55:95:96:76:a1:11:
19:53:9d:64:d7:25:4d:d9:5c:04:fa:0a:4f:e0:de:
55:f7:ca:d5:df:bb:89:ac:e3:c8:12:91:30:50:17:
5f:db:f3:69:41:41:57:fa:90:f7:e5:24:95:71:00:
c7:49:53:3f:b3:2d:2c:b5:3d:94:f7:24:37:9f:db:
04:64:41:1f:ee:b0:20:35:52:7f:fd:f0:f8:f8:92:
68:54:ec:62:03:3a:48:d2:94:34:a9:73:e0:38:5b:
2e:33:b1:7f:58:64:d5:fd:cc:e1:6b:00:05:27:63:
6a:bf:99:10:71:e6:ae:ab:f6:16:6e:a1:8a:af:cc:
3d:dd:c2:8a:eb:35:d4:ba:fe:48:c5:03:f4:f5:92:
8e:10:61:48:9b:f7:8c:08:53:4c:27:db:28:cf:74:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:72:C0:16:66:46:AD:40:AF:11:53:40:3D:66:96:00:92:65:A3
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7c:21:ff:d5:fe:89:e6:19:24:2a:17:b0:f1:87:02:d8:0e:
44:ec:3d:9f:6d:e4:63:1c:1d:09:5f:de:67:94:35:48:5f:36:
c1:fd:e0:62:1a:2f:80:0c:14:0b:16:93:e2:ab:49:db:02:17:
74:f8:40:b8:c1:60:51:b5:2f:b7:45:d2:bf:32:99:f5:c0:fd:
b2:ef:99:63:99:0a:b8:1f:a8:5f:21:f4:df:28:d6:41:33:42:
d9:d3:35:cb:35:48:3c:e4:20:f6:b1:f8:75:e6:3a:10:db:43:
62:47:f3:06:d5:55:ea:83:f3:04:81:44:8f:30:cf:40:3e:c1:
97:80:52:1a:42:ec:a8:8d:cf:91:bc:ab:8f:7b:bc:16:9f:80:
0b:e4:03:d6:50:4e:d5:b6:e4:dc:35:c1:c8:1e:36:3f:01:96:
49:b3:1d:77:63:3f:c5:c0:bb:37:7c:4a:41:94:69:16:84:9e:
89:23:b5:c4:ca:e1:53:47:16:66:fb:c4:00:93:ff:ca:41:8d:
a2:d0:15:bf:f9:d5:4c:cc:37:e9:13:cc:c2:6d:a8:d8:8a:ec:
c2:71:e2:09:33:4a:a7:3b:08:42:da:82:87:ef:d8:ef:9e:29:
ca:3d:e1:4f:0c:c6:0f:f5:e2:f6:f8:90:a7:f7:03:62:6a:d3:
91:b1:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:45 2025 by rpki-client