Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: tEru0mQSzPoBqLuGwXlrkGtdBIMclryMpYXgYpDtmDs=
Subject key identifier: 98:B7:2C:46:FC:BC:23:E7:3D:15:AD:2D:3F:9E:5C:D6:E7:84:ED:E8
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019A025984F4E10B8153A52B7885F095DAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 16:00:12 +0000
Manifest this update: Mon 20 Oct 2025 16:00:12 +0000
Manifest next update: Tue 21 Oct 2025 16:00:12 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: qUy+KjarW0IdmnauTVtQqNiD32MxknMHG8K7qWaSHQM=)
2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:84:f4:e1:0b:81:53:a5:2b:78:85:f0:95:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Oct 20 16:00:12 2025 GMT
Not After : Oct 21 16:00:12 2025 GMT
Subject: CN=98b72c46fcbc23e73d15ad2d3f9e5cd6e784ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:3a:54:a4:b7:13:56:01:bc:cf:ec:ee:74:
7f:1e:d6:48:ff:a2:68:fe:3d:33:d1:b7:55:76:de:
7c:c7:de:0a:ca:b9:dc:0c:e7:a7:b7:a5:0a:36:19:
15:53:02:d2:ab:7e:8a:c8:f6:57:73:69:46:86:81:
1f:90:bb:0f:33:73:06:3d:12:f6:e6:6f:fe:9a:6d:
4e:2d:69:94:ed:83:6e:78:b3:f6:fc:67:cb:64:75:
37:3c:ce:ba:9a:0e:26:5f:f2:4b:75:02:ca:40:4e:
07:8d:da:b3:0d:4b:f0:60:ad:3e:c1:f4:1c:77:89:
8e:dc:06:0e:d3:8f:01:03:30:20:5c:00:b4:00:4e:
05:04:52:d5:52:0a:43:0c:0a:52:09:29:d6:8b:ee:
58:83:31:81:48:eb:82:34:9e:1d:fa:e6:62:67:3e:
6d:bb:0f:58:11:c9:ad:da:7d:66:b8:ff:2f:de:c8:
d6:99:c6:98:5b:12:70:38:8c:d8:38:a9:d7:17:41:
6e:bc:78:37:db:f4:95:58:1a:2b:d6:de:29:8e:91:
de:66:c5:69:74:d9:25:b3:f2:d0:63:09:c8:df:48:
af:44:ed:cf:f5:93:3b:d6:fe:7e:db:61:f6:e1:fd:
b7:6c:c1:23:51:d1:8a:b6:71:df:1a:50:05:af:bc:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B7:2C:46:FC:BC:23:E7:3D:15:AD:2D:3F:9E:5C:D6:E7:84:ED:E8
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:8f:c9:5a:29:1b:6f:1d:07:31:a9:bb:ea:df:52:55:dd:
2d:0c:ba:c4:23:0c:7c:80:4f:a7:89:9b:87:86:18:1e:52:46:
fb:0b:ba:7f:ed:ac:c7:b4:85:0c:48:a0:f7:8e:10:e8:61:d0:
32:6c:1e:b9:55:0f:4b:05:98:cf:06:e0:da:36:95:26:68:f0:
02:22:ac:16:0c:2d:c6:4d:43:de:56:31:a4:2f:8f:29:5d:de:
af:3e:6b:37:b3:b2:84:a3:98:12:71:7f:6a:f5:05:94:c2:c3:
7b:a8:50:9e:25:8b:c6:97:0d:91:b8:a1:57:a5:38:67:f2:db:
37:8a:49:f0:db:0e:13:d4:6e:c1:60:2d:d5:40:36:e2:d5:dc:
13:94:42:32:ee:e3:8f:23:13:f4:b4:de:fe:3d:bf:e3:e0:16:
cb:a0:4c:53:7a:fd:28:8c:88:b8:e6:66:92:96:1c:59:84:69:
85:31:44:cd:88:62:94:73:b8:62:26:79:db:d6:a0:6d:08:b9:
ba:f1:f4:ab:73:07:24:23:cf:54:83:4c:ca:4a:70:67:f1:67:
4d:59:ad:63:79:5b:ac:d3:82:a2:8e:5f:29:32:50:02:f8:61:
38:df:f2:61:5e:60:39:63:10:e6:91:12:86:f4:e1:a8:59:71:
5f:b7:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:06:46 2025 by rpki-client