Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: Fx1t4zjvkB26rm8w/Cu4pUdd8jS7Y2AjrJzG+2JgLLs=
Subject key identifier: E4:F9:A2:3A:9D:17:73:BC:7B:D8:A8:F2:FA:0B:3B:F0:2C:3D:B5:CF
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 0199FB0EF9AD4D37DEE02FC618634C00CCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 039B
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: vEYf56HlwOH3f/Ga40kk2icpSRkrUC2e0/vZKvIaoGk=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f9:ad:4d:37:de:e0:2f:c6:18:63:4c:00:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=e4f9a23a9d1773bc7bd8a8f2fa0b3bf02c3db5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:b0:81:c4:8d:f1:4d:62:b9:84:12:30:fb:
98:27:8b:7d:e0:b5:94:ce:c2:9e:a4:a7:89:09:e7:
16:67:6f:ef:db:44:51:bb:76:e8:b9:4f:6d:bb:4c:
10:ad:3a:0a:87:95:3b:77:61:eb:9c:7b:ce:23:92:
b8:78:14:6d:80:ab:b2:c5:4d:d8:84:a5:46:04:a0:
de:b5:9b:7c:be:f3:d0:20:fe:0f:05:c9:7f:fb:53:
c7:b9:66:c5:4f:11:8d:57:bd:ea:98:41:88:78:85:
08:5a:fd:4b:26:6a:67:a8:e2:10:bb:ff:d2:e3:18:
85:9f:c0:20:72:7e:ac:63:a1:a3:c7:5e:22:4e:0e:
2a:d4:cd:b6:ea:2b:a6:fc:4d:be:a6:69:84:90:17:
9c:89:b1:ee:41:11:8b:ee:af:67:dc:17:ab:99:ad:
34:ef:58:c5:96:ab:05:cb:8a:ca:49:cc:13:60:68:
95:60:2b:be:4d:4b:a5:f7:b9:2a:cd:e4:97:5f:eb:
57:49:bf:87:b3:8d:69:e2:4d:0b:fb:96:02:a2:98:
81:50:f7:24:bc:41:27:b3:32:a5:28:ea:9f:3d:c3:
5a:00:90:73:1f:97:17:09:c1:ac:42:ba:4a:31:4d:
2d:2c:c9:71:ee:12:a8:25:0a:74:ef:48:b2:f2:8c:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:A2:3A:9D:17:73:BC:7B:D8:A8:F2:FA:0B:3B:F0:2C:3D:B5:CF
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9a:d9:19:be:21:bb:cb:9c:23:77:ae:1f:8e:b2:b3:d3:8e:
80:62:d9:ad:c8:6b:90:c5:e7:19:14:5b:f3:86:1c:aa:61:5e:
2d:d0:c6:dc:3f:f5:b2:c2:4f:51:b8:91:02:d9:49:12:c3:e4:
f0:32:c7:f9:65:b2:c9:75:02:b2:01:03:06:74:e3:1d:85:07:
18:c9:4a:d0:9b:99:5a:b6:a0:f8:1d:cd:98:86:1f:a2:c4:d2:
ec:c7:1b:17:80:ad:b2:a0:cb:08:4f:44:22:99:37:6a:c9:e2:
8a:fe:b5:c3:42:bd:c8:86:97:46:43:b1:b5:97:7c:a0:35:b6:
0f:fd:ae:30:cc:e7:fe:48:de:64:20:dd:76:3d:16:34:56:62:
3a:02:6d:e4:fe:fb:5c:3f:e8:0b:62:19:81:31:ee:d2:19:d4:
e5:e1:66:e6:7c:36:24:91:f0:58:5a:2f:5b:35:c7:25:15:57:
70:98:ef:40:d0:b1:13:94:7a:bc:17:1b:ee:e3:3f:19:35:b0:
e6:99:3f:53:c7:f5:1f:0a:76:2a:04:be:0a:1b:7a:ba:7e:9c:
61:50:b3:6a:99:fe:28:00:57:7f:89:e2:4f:54:76:a5:0d:02:
e9:12:da:98:80:39:8d:af:b8:f0:0c:8b:26:86:8d:81:0e:8a:
42:02:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:17 2025 by rpki-client