Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier: qYWRhyIsG9oV4kwgqmznpgelaW6X4dAJzhMSj1W2MjQ=
Subject key identifier: B8:EE:0F:FA:83:85:3E:EB:6C:C8:C8:D2:13:78:81:F2:B7:14:86:3F
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer: /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial: 0199FB459D3AA18D26193AAB807FADDFC63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number: 11A5
Signing time: Sun 19 Oct 2025 07:01:07 +0000
Manifest this update: Sun 19 Oct 2025 07:01:07 +0000
Manifest next update: Mon 20 Oct 2025 07:01:07 +0000
Files and hashes: 1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: xbx+ZFqXGvbKdJbCisgD9EJFqW5p2TpqQ9O4GATSRwk=)
2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9d:3a:a1:8d:26:19:3a:ab:80:7f:ad:df:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Validity
Not Before: Oct 19 07:01:07 2025 GMT
Not After : Oct 20 07:01:07 2025 GMT
Subject: CN=b8ee0ffa83853eeb6cc8c8d2137881f2b714863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:d5:be:1a:0d:e1:18:c5:76:08:35:b5:71:
61:f4:92:b2:6c:36:98:57:b4:01:7c:81:60:09:ee:
8d:c6:fe:8b:a0:11:d9:78:63:3a:67:af:ff:03:98:
94:98:f0:f2:01:92:dd:c7:2f:68:8e:5c:ca:fa:43:
cf:5b:cb:56:13:a7:e0:87:e1:d2:03:7d:9d:cd:08:
2a:3d:85:7b:21:b9:da:0f:c7:59:2d:5a:dd:2a:49:
db:5e:e0:b7:63:ce:72:c7:89:9a:a9:a0:1f:ce:da:
8b:17:46:74:4a:67:5a:f9:f9:5e:b6:59:41:1f:bc:
3b:78:a2:69:79:51:d2:cd:ed:c8:93:67:21:2d:2e:
d9:79:27:02:b6:2a:41:03:8f:3f:04:28:49:ce:ba:
e8:70:d7:da:55:dd:3a:78:b7:92:5c:2a:15:3d:02:
56:72:46:58:5b:f1:5a:f6:c6:f3:30:3b:e2:e4:ce:
2f:55:dd:57:fc:36:91:3f:6d:a8:6c:e8:31:1e:0d:
7d:a5:ff:56:af:ef:76:1d:9f:83:0f:7c:11:77:8b:
06:4d:35:0e:db:7b:60:b3:e6:f8:36:26:c3:9a:49:
4c:c4:06:14:81:68:ce:44:8d:ce:37:dd:f9:6e:37:
04:99:66:d1:2a:5d:cd:62:64:48:47:2b:60:9f:7a:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:0F:FA:83:85:3E:EB:6C:C8:C8:D2:13:78:81:F2:B7:14:86:3F
X509v3 Authority Key Identifier:
keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:23:cf:9d:44:86:bd:7d:be:29:5e:32:d4:f1:54:b1:5b:
6c:4f:a0:22:e8:2f:17:6d:ad:87:5e:50:60:ca:01:ef:81:84:
4f:23:9b:3d:b0:9d:5d:fb:bc:40:8b:fa:ec:a4:27:54:60:5a:
94:5d:e9:3d:13:b0:72:b6:a7:dc:d3:81:69:59:dc:ea:bf:16:
5f:da:d6:de:9a:c8:44:be:7b:d9:f0:c0:9b:56:d8:93:77:3e:
d3:f5:0e:c2:39:e1:b1:7a:33:16:77:c1:f8:9d:b3:79:cb:09:
ab:22:a7:88:ba:a9:99:48:78:69:76:d9:3e:48:25:78:63:ca:
36:3d:8f:ca:27:5f:66:4f:14:db:54:8a:11:86:10:9f:a5:63:
b6:b1:0f:04:38:5c:c6:3e:fe:21:6f:28:fb:d0:6d:d6:74:49:
0f:1f:1d:32:c6:ec:94:d1:24:c3:29:6e:f5:e3:2d:d5:06:cc:
ac:86:6c:5b:0b:a6:b3:10:32:23:0a:6c:2f:d0:fb:27:18:57:
1b:13:b6:10:82:b2:d5:d1:30:dd:a7:3e:65:c2:3c:d4:c6:0b:
ba:56:08:3d:f9:b4:03:84:0f:c4:09:71:0c:b0:6b:26:ab:67:
1a:a0:bd:43:4a:35:60:4f:28:d4:49:68:f0:09:e6:ef:2b:2a:
f4:6e:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:28 2025 by rpki-client