Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier: X4HVCM3Y93gDhv75eA0NZw4rumHkESshH8y8ecLUQZk=
Subject key identifier: CB:97:6D:A9:88:85:A4:EC:4B:E5:9B:9C:52:74:DD:E9:D5:1F:A0:6A
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial: 0199FBEA86ECEC1D2C8ABD33B69A17AE01FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number: 0F4A
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: m6NAFujP0WXdMpbMGOV7wFvwbbLiwii8U7RPe2CT6XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:86:ec:ec:1d:2c:8a:bd:33:b6:9a:17:ae:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=cb976da98885a4ec4be59b9c5274dde9d51fa06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:b6:84:e7:22:c9:ab:2a:1a:61:85:4c:e3:
3a:76:7b:7d:52:95:dd:ae:6c:79:85:16:51:ca:3a:
96:9b:73:02:da:73:ed:92:2c:35:2b:cb:e7:a5:a3:
62:83:39:09:c0:73:df:05:50:b6:47:35:88:5d:95:
b2:90:0e:9c:04:56:37:c1:e1:5b:4e:73:d4:8c:00:
5f:15:0a:00:ae:e2:de:8a:7c:a5:ca:d2:2d:f0:a6:
ec:4e:79:66:27:00:62:dd:ef:1f:7b:c1:b8:1f:7c:
89:a9:7e:31:ee:5e:df:5d:ba:85:32:bd:72:41:fa:
cf:64:5b:7c:dc:b8:02:6b:ee:2d:d6:26:d3:5f:49:
c1:bc:03:03:14:3b:a6:d0:00:8a:96:e6:2b:ae:99:
0a:b9:f8:dd:a7:68:4a:6e:76:de:63:5a:42:fd:90:
d6:f5:0f:ef:44:33:72:9e:98:64:5e:5e:2a:fb:d4:
02:a2:b7:80:12:e6:11:e8:bc:ea:ce:37:1f:0d:fd:
65:1a:a1:ce:b1:7a:ec:6d:8e:41:55:3a:f0:09:51:
8b:b4:13:83:c1:47:cc:6f:43:68:56:d0:f5:59:d1:
ea:45:21:8c:92:3c:2d:7f:b5:b9:2c:c2:66:b3:29:
12:f7:3c:b5:40:ef:fe:04:a9:5b:58:24:df:cb:48:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:6D:A9:88:85:A4:EC:4B:E5:9B:9C:52:74:DD:E9:D5:1F:A0:6A
X509v3 Authority Key Identifier:
keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3a:0b:d9:8f:0b:6a:cf:91:70:68:a2:45:93:06:ae:d6:e4:
5f:24:cc:60:91:4c:1b:64:76:4f:b3:62:e5:bb:61:14:77:e0:
bd:c2:c2:8e:14:68:74:b0:a4:67:66:fb:b3:33:72:d0:33:31:
8a:42:5e:2d:22:0a:ab:31:1d:c1:67:41:35:d7:92:ff:e1:57:
c0:88:50:44:fb:32:f1:62:82:6e:74:0c:d5:6a:93:11:fb:33:
3a:26:32:0b:3a:37:ea:4e:25:c4:57:13:d7:3e:9e:55:ce:52:
bf:69:0a:23:3d:bc:db:ea:ce:f9:91:76:36:9e:a0:b2:36:97:
4d:37:c7:b8:c5:d1:21:3a:3b:56:b6:e2:d3:fc:09:a7:18:32:
33:e0:f4:2f:5a:ca:da:8e:52:e7:4e:58:9b:81:1a:75:0c:ae:
28:65:89:2a:44:55:b3:87:0c:26:b1:e6:50:26:ff:ca:b7:78:
f3:bc:97:62:c1:3b:62:d3:9d:64:6c:3c:68:e2:1e:42:37:5a:
98:74:d6:c4:24:a6:dc:2f:5d:6b:75:ad:d7:29:f6:8a:ae:99:
95:5b:71:d9:43:a4:7c:96:53:93:89:ec:b7:e8:8d:52:24:0d:
0e:1c:09:40:2f:b4:3e:c9:c8:2c:ba:11:a1:b9:ef:be:6b:f7:
47:57:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:40 2025 by rpki-client