Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: cwvssj1CcnqGhwCIVJFDKfvz6B3nPEZpPGBUgxpPvkE=
Subject key identifier: E8:C7:C2:C4:6E:7E:BB:3E:16:49:3A:11:86:3D:C5:7B:BB:2E:21:AD
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 0199FDD9FD35DB53B41AD943E72BC0D7CF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 0568
Signing time: Sun 19 Oct 2025 19:02:25 +0000
Manifest this update: Sun 19 Oct 2025 19:02:25 +0000
Manifest next update: Mon 20 Oct 2025 19:02:25 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: cxnGBggLLepIUhNOyj/ICUNucya7zZaICKFKlAEy5QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fd:35:db:53:b4:1a:d9:43:e7:2b:c0:d7:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Oct 19 19:02:25 2025 GMT
Not After : Oct 20 19:02:25 2025 GMT
Subject: CN=e8c7c2c46e7ebb3e16493a11863dc57bbb2e21ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:3e:9c:c5:3e:44:a2:fb:a0:07:df:8c:f1:
f4:50:b0:fb:65:e2:c2:5d:de:56:db:77:5a:d9:c1:
c3:08:29:b2:4d:a3:1e:6f:09:35:4a:0d:25:33:be:
c8:4e:5b:a4:35:e1:d5:97:78:28:ed:5d:5f:ff:fe:
5a:1f:12:f1:90:00:3a:6f:13:da:2e:2f:62:59:86:
8f:28:c3:ee:bc:a1:11:33:d0:6e:28:d5:e4:eb:2c:
d2:05:5f:e0:08:85:a3:f0:4d:05:6a:eb:45:28:98:
cc:90:8a:e2:02:4a:25:d7:91:1e:60:2e:08:2a:e5:
05:38:44:b2:36:c4:f9:0c:97:b7:a4:0e:91:16:01:
ef:e2:3d:3f:cb:0b:b2:26:35:ca:29:01:22:8d:83:
d7:54:86:37:6a:7c:df:1e:d0:c9:cc:18:46:f2:ff:
de:f1:82:b0:89:62:c4:bb:37:8f:06:e2:cf:a3:66:
08:a9:e5:7f:59:0b:2f:62:15:9e:bb:ab:16:c6:82:
27:02:9e:d7:b7:86:0f:0b:23:92:e5:f9:04:ae:89:
7f:32:1d:78:20:b3:b0:df:e1:41:a7:38:4d:1a:5e:
20:56:b7:0c:f3:c2:91:29:ec:e8:2c:dc:3b:97:36:
6d:33:9a:1a:3b:4e:99:d0:2c:d8:34:6c:e6:2e:e1:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:C2:C4:6E:7E:BB:3E:16:49:3A:11:86:3D:C5:7B:BB:2E:21:AD
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:32:17:13:aa:68:7a:cb:0f:39:a8:18:60:96:23:0c:b0:74:
08:bf:84:85:07:da:51:af:30:02:31:30:5a:ff:40:d4:91:98:
9a:45:22:6d:51:cc:db:b6:bc:f7:ca:ea:71:9c:96:6e:3a:b5:
5f:5e:3a:7e:a6:e5:9d:4d:2f:67:fb:b3:13:1c:dd:3f:63:67:
7b:44:9d:c4:e7:8e:25:97:68:e5:0a:f0:2d:85:88:b7:e6:9f:
81:8d:b0:c5:a4:7a:7a:d0:d4:6e:16:21:95:40:90:08:ba:50:
b1:10:48:66:00:71:2d:1b:dc:98:a2:91:bc:ee:bb:96:24:00:
b0:5e:0e:86:67:2c:e3:17:62:f8:5a:72:72:2a:b3:16:40:10:
68:7f:85:2e:c5:c2:4d:ff:90:a4:1a:28:58:3f:55:a4:6d:d4:
24:9f:05:3d:dd:a5:20:b8:f0:23:c5:df:0a:56:ea:e6:df:3e:
9f:63:46:15:b0:51:ed:a5:6f:fa:a7:1f:a9:c9:e0:ec:9d:a8:
5b:e3:63:56:9b:f1:8c:99:9a:7c:5a:16:b1:e3:7e:74:d8:66:
6e:83:49:0c:9d:44:57:15:d0:7d:e8:25:d7:86:aa:1c:a2:17:
4f:3e:2e:2a:f1:43:2c:61:76:51:0e:7b:8d:60:c9:2f:97:e4:
bd:e4:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:21 2025 by rpki-client