Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: xr2SxbJMyp6/cEVZHWV+hi2zSeGE09n3rzcAHwRjmfo=
Subject key identifier: F1:4D:9F:BD:89:D5:25:C9:CE:D0:7A:68:E0:87:78:78:D5:A3:11:D6
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 0199FC8F4F85B3F5F87BCAB748F12710A4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0E62
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: FOLQ2hyGnx13Yna4a2itaxzKBgwEgHVL9lZyztKfvLM=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4f:85:b3:f5:f8:7b:ca:b7:48:f1:27:10:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=f14d9fbd89d525c9ced07a68e0877878d5a311d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:20:46:24:5c:49:8c:7f:f2:85:77:ea:3c:
ff:0c:d5:d2:e0:5d:34:90:1a:0d:53:21:ac:e1:c5:
10:37:0e:1f:26:d2:81:20:83:3c:18:83:0e:41:0c:
a1:fe:6a:b9:56:c1:b6:1b:d4:91:68:9e:83:b8:81:
55:d8:9f:df:c6:e0:5a:05:75:f3:37:1c:fa:aa:b1:
65:9d:7b:6f:c5:bd:e5:84:ae:c2:ca:06:14:24:05:
53:65:6c:e4:53:68:2f:41:c3:de:82:97:b4:4a:f2:
01:85:07:a4:79:11:52:17:ce:4c:dc:04:7b:7d:d4:
1f:f7:8c:a2:5d:73:3d:67:3f:03:88:d7:64:8f:83:
69:f2:1d:a6:f9:fc:73:e5:de:b5:f6:60:27:3f:ca:
b5:90:8b:06:e2:a8:fa:bf:5f:dc:07:99:f3:90:5b:
2a:2f:d5:2f:51:8e:5e:77:78:34:a4:98:01:a6:a3:
33:01:8d:5f:a1:62:35:be:d3:d2:2e:b2:b5:2a:3b:
b5:1b:e7:86:f3:7e:a7:1a:3a:c5:ce:50:cd:db:66:
a0:af:e7:41:7e:9f:e8:0c:d3:2e:3d:46:fa:22:ac:
52:46:17:42:19:23:7d:68:45:65:ed:89:50:b5:23:
90:74:d9:4a:73:1f:fe:45:de:9f:1b:b3:b0:95:17:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:9F:BD:89:D5:25:C9:CE:D0:7A:68:E0:87:78:78:D5:A3:11:D6
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:2e:12:2e:db:24:70:66:07:48:c8:83:8b:8e:a7:4f:4f:
02:ad:b6:40:69:3c:1d:dc:f0:34:07:77:91:f4:ee:3f:ef:7f:
4b:1e:47:27:57:4a:b0:72:7d:6d:55:8c:6b:04:c5:92:b2:82:
59:4a:8b:c1:fc:2f:13:84:fc:6c:9a:ff:34:1d:4e:0c:a6:e2:
a6:b4:bb:f2:f7:04:5a:5d:be:83:43:01:b4:d6:e7:3c:03:3e:
7e:10:74:b1:51:e4:6f:54:d4:fd:67:cb:b7:b8:99:8b:80:a8:
37:f8:0b:95:38:23:f4:9f:9a:ec:47:4a:67:3f:c9:f5:14:4b:
fe:6a:94:74:ac:f0:88:22:89:c9:97:d2:88:9d:aa:7f:82:5b:
d0:2b:0c:49:01:0b:d4:a1:95:3a:81:25:c9:78:fd:34:a6:86:
3e:83:e7:9f:de:b9:c0:d9:8c:12:f9:31:9e:ad:c9:2a:64:85:
b3:f7:eb:16:6e:dc:6d:d9:9a:44:cd:5b:46:ec:ca:52:24:79:
f9:42:e0:1e:15:c5:44:17:ab:09:6e:f1:3f:0b:75:c2:c5:03:
1b:42:57:3a:da:5d:77:55:7a:fc:37:5b:fe:a4:e2:1a:ac:fa:
f0:e7:36:4e:69:76:33:2e:e6:04:e7:92:66:34:62:75:b7:43:
bf:a2:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:47 2025 by rpki-client