Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: 5j4CY6G/X+SKnBtT53NhODDQ0AX195k2MqT2ezzPvZM=
Subject key identifier: DC:04:76:EC:9F:72:0F:0F:EA:4A:8C:44:F0:A5:F4:C0:CD:EF:AF:D3
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 0199FC8F869BA6B4FA7F2C180B83773771B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: F84dt7r3khIlavvhyuHSdvI7ZfjVnQyr7nn1j2k/Dvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:86:9b:a6:b4:fa:7f:2c:18:0b:83:77:37:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=dc0476ec9f720f0fea4a8c44f0a5f4c0cdefafd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:df:5f:9f:43:97:c4:c4:b3:4b:e8:11:09:
50:de:94:d8:d4:37:d0:64:a2:aa:95:5b:46:59:9a:
36:5b:f8:ca:d4:43:2a:68:f3:1c:96:53:bc:2e:88:
5e:bc:aa:64:48:3c:eb:de:ef:d0:2c:45:dc:5e:d1:
2b:06:34:8d:0c:c0:eb:de:be:8c:b0:f4:8d:f7:15:
8b:1a:0e:0c:31:ce:61:fd:b9:4b:82:e6:49:86:bf:
ec:3d:3c:ae:59:a8:37:06:e8:d2:03:d3:d6:02:fb:
d7:5f:5f:3b:7d:69:32:80:76:8f:a7:d3:79:f7:61:
48:ab:e3:bc:fb:ae:67:80:a7:2c:ef:e0:82:98:d7:
3f:ce:ad:97:44:58:42:ea:21:13:67:cc:34:08:41:
df:a6:3b:44:4f:16:e5:72:98:47:12:d9:4c:86:cb:
07:a4:44:5b:57:8f:93:3c:ba:96:19:c9:4e:d6:77:
93:47:fd:b0:93:f9:25:5b:a0:b6:5e:2d:70:00:9b:
49:6f:72:61:5a:af:1d:ad:f2:a8:13:63:f8:b2:e0:
44:c7:c4:99:e8:75:4f:d0:14:19:78:b1:45:17:34:
ab:0a:53:a5:9e:34:34:06:b3:8e:0b:44:a4:e7:9b:
32:56:ae:53:60:0f:1f:20:af:f9:cf:6f:ac:19:51:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:76:EC:9F:72:0F:0F:EA:4A:8C:44:F0:A5:F4:C0:CD:EF:AF:D3
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:18:02:94:a7:a2:51:0d:a5:c8:bf:35:cd:f4:48:d4:f5:42:
f3:7a:60:93:fe:c3:37:b1:94:e8:02:f8:8c:1d:63:86:76:83:
7f:c7:24:6c:58:16:88:11:21:0c:16:8e:4d:59:5f:93:a5:ac:
93:df:d6:2f:93:b7:0c:7b:ef:33:70:4b:30:25:5a:f8:87:a3:
e4:22:49:10:7b:56:c7:85:99:09:0e:10:90:83:6b:7b:d9:f0:
d9:93:b7:b2:dc:98:61:66:e7:7b:88:9a:c1:f6:4c:2d:e7:a4:
40:c5:8b:e6:b9:7e:21:eb:6c:ea:45:06:67:62:89:19:1f:b1:
8d:1a:d7:19:e0:fc:b2:fd:2e:f0:f7:12:91:0e:9c:bc:02:1d:
42:50:e2:c6:0e:15:47:71:08:81:35:30:2d:06:cb:a2:16:46:
54:01:dd:74:3f:6c:5d:0a:f8:73:30:06:44:ee:80:1a:e6:97:
e0:2d:6e:69:75:39:70:ed:ec:82:4c:9b:16:0d:48:fa:b5:69:
32:8b:59:fa:dc:21:fd:47:46:bc:bf:f8:26:ef:6b:30:28:0c:
2e:fb:76:0b:b9:c4:5b:cc:31:9a:4e:03:e2:17:ef:ec:e1:51:
81:f2:40:76:b0:e4:0f:38:91:08:22:05:b0:df:3c:70:84:8e:
b6:0a:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:22 2025 by rpki-client