Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: vhTjDZJn7OuM7RlgjJAJrBKtrq64X92Mboo/ZU7aPrc=
Subject key identifier: ED:F7:6E:E9:93:6E:55:83:17:D8:61:BC:2C:B6:6A:D2:57:FD:0A:A9
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 0199FB7C7B338EFFB4F8227ED7F02D2AB064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: QjWFfICdom1r4cA5B8YYle96K2nS5BFV7bgmQDFEFxU=)
2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7b:33:8e:ff:b4:f8:22:7e:d7:f0:2d:2a:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=edf76ee9936e558317d861bc2cb66ad257fd0aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:d3:64:59:cb:30:ab:4d:45:c4:55:e6:fe:
ad:64:12:a1:ec:7a:28:4b:18:a8:cb:78:4b:d8:d7:
11:80:2d:54:4d:0c:1c:9f:c2:9e:87:ad:20:16:79:
06:95:09:61:63:fc:e5:74:3c:57:5d:e2:9b:dd:7a:
ff:f5:b3:da:7a:7d:01:09:6f:a6:22:13:60:7c:03:
03:47:7e:e1:8d:80:91:05:b3:5f:4a:23:90:42:64:
21:c7:80:b7:5a:f7:42:4d:1f:18:4d:90:ab:cf:28:
05:a6:bd:9b:3c:31:f1:90:60:bb:86:bd:b7:88:ab:
5f:5f:7b:31:03:86:70:e5:46:48:78:4d:ba:b6:ca:
4f:bd:16:b1:b5:92:9e:52:76:99:80:12:17:2a:25:
17:09:bd:10:ef:0b:45:62:8b:96:70:b3:c0:e5:b5:
0f:0e:06:f4:a2:0f:fc:e3:ad:2d:36:8b:57:d6:5b:
68:65:de:2b:be:e3:8f:78:6a:02:fd:ac:27:b9:88:
d9:1c:3d:aa:06:e3:05:d2:4c:55:9c:3b:42:60:80:
27:bb:73:c8:e4:88:2e:9b:b8:b9:d0:49:58:71:c1:
bc:77:c9:35:4f:dd:43:29:6a:01:a1:b8:2b:bb:3d:
dd:3c:9a:94:86:ad:63:a1:b4:83:93:f3:b4:8c:f0:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:6E:E9:93:6E:55:83:17:D8:61:BC:2C:B6:6A:D2:57:FD:0A:A9
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:15:ec:1f:23:e3:4e:49:c5:2a:4c:87:8a:72:c3:5b:b8:
0b:52:38:48:83:0a:06:29:eb:30:02:77:b3:48:81:16:49:9f:
1e:0c:52:31:de:b4:ea:49:4f:00:6d:64:d9:67:0c:bc:db:70:
5f:25:03:07:8e:bd:45:aa:80:3d:c5:30:38:28:d9:08:dd:53:
a7:bc:6c:1e:43:83:37:33:28:d2:2f:78:0f:43:52:6a:29:e9:
ee:43:aa:15:d5:23:c2:66:4a:98:7e:e8:f9:5f:ec:7f:af:b7:
c2:af:88:51:7b:95:4a:30:f2:83:35:df:31:35:ff:03:0a:4b:
6a:a7:63:aa:36:85:9c:95:13:9e:32:82:7d:c3:b4:30:09:68:
03:ae:ce:40:d9:7a:ad:03:73:5f:31:e3:20:09:75:7d:bb:22:
56:21:4d:b1:02:93:f0:7c:96:9d:a4:48:94:44:4e:2a:a4:b4:
c9:b9:4c:b7:81:d0:16:d4:33:ec:82:09:89:3e:44:30:9c:52:
9f:47:35:65:7c:e5:18:0f:ca:76:ff:00:e9:76:35:5f:79:b1:
01:c9:f8:25:64:3b:7f:ab:4e:e8:62:c8:a0:81:18:a5:3f:47:
7f:d2:82:7e:08:da:de:a1:35:93:e6:30:eb:29:1c:5d:7a:62:
3d:f5:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:38 2025 by rpki-client