Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier: A5C2GngyPMjxRZ48VAE73UiB35ee7TAtLPHrEMJDN08=
Subject key identifier: 39:81:2B:CE:92:63:82:18:C0:C2:AD:D4:E2:2D:57:C5:AD:0D:B8:C5
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 0199FD6AE7D68A3C2E2572DEF3B4A6F2C097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number: 0ACB
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=)
2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: b/Z/kkM5QmjTj+nwBu4yWbE/gKDu/CKKYU1waiUwIIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e7:d6:8a:3c:2e:25:72:de:f3:b4:a6:f2:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=39812bce92638218c0c2add4e22d57c5ad0db8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:2e:9d:95:27:53:1a:85:6f:5c:5c:e8:35:
4a:50:70:5f:38:8f:28:12:14:af:f7:c1:2d:8c:e7:
5a:fd:0b:cf:10:9f:f5:14:59:c0:b1:c0:3a:02:48:
20:3f:2d:e3:ae:d6:8e:ac:67:81:03:9e:f3:f1:d5:
2a:29:c4:96:67:2b:ce:0c:d7:5a:fe:11:8c:5b:7e:
97:ed:c4:a9:85:8c:a1:8a:04:29:f7:f8:48:7f:52:
38:df:fc:1d:41:11:e4:f7:23:50:70:81:d3:ae:2b:
4a:d1:2e:4f:cd:3d:3f:a5:39:13:88:09:ac:75:63:
ab:db:c2:4f:77:1a:04:60:33:e1:8a:02:8e:d1:cb:
06:46:68:ca:e2:08:ab:de:c0:67:0d:73:2c:1d:38:
f9:bf:96:7e:2e:23:2f:fb:49:67:3a:55:a0:a0:d0:
45:56:15:3e:e7:2f:77:fd:94:20:ed:24:5e:ec:77:
c7:28:bd:d4:a2:cd:26:d1:96:8d:3d:40:74:a7:7f:
87:15:b0:bf:30:13:0d:8b:aa:64:fd:f9:67:7f:e1:
8d:48:2c:24:ee:8b:95:dc:e4:36:72:ea:fe:f1:4a:
44:21:7f:eb:e2:c6:78:a3:c9:6b:6b:11:13:fb:ae:
33:89:38:87:b4:59:d8:07:c8:f0:0a:dd:93:63:09:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:2B:CE:92:63:82:18:C0:C2:AD:D4:E2:2D:57:C5:AD:0D:B8:C5
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:66:c7:27:b7:8e:f7:99:3e:7a:3e:04:f0:64:22:54:27:
7f:9a:66:9a:8b:85:e7:e3:84:89:4c:bb:2e:b1:81:0a:94:3b:
0a:0c:94:ae:8a:8f:f8:30:1f:4b:e8:a7:f7:19:57:9f:0c:f2:
15:67:7f:d0:d7:53:9e:5c:25:68:83:2f:56:34:1a:bc:97:7e:
1c:ef:a5:e4:fc:0f:f3:cf:a1:c1:bb:c9:51:28:1a:53:cc:9b:
3b:af:5e:7d:e6:5c:a5:0f:89:b0:7f:20:8f:43:4f:b2:3f:30:
fb:0e:60:c5:c6:70:7b:8d:d1:17:d3:99:19:1d:3a:7e:bc:79:
36:7c:d6:44:b4:ae:12:d6:75:ad:4e:f7:16:57:86:ac:92:e5:
59:6b:af:6f:e9:0a:54:d5:cf:92:9f:9d:f7:19:34:99:94:4d:
d0:92:69:39:e8:93:4f:d5:66:b0:3e:0f:70:ab:3b:0b:d0:78:
37:d1:88:b2:4b:44:32:0a:55:e3:aa:94:20:a9:0a:fd:54:36:
32:af:95:ea:5b:60:43:4e:1a:d9:4a:40:3f:c4:01:2f:a3:1c:
ff:ef:70:54:a6:ac:04:c7:d5:37:aa:cf:f8:80:40:c3:2d:53:
61:7d:57:fc:36:2e:74:77:d6:4f:31:e9:53:53:63:00:d4:b3:
62:1c:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:34 2025 by rpki-client