Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: PKco9VOIclh+CGfV8CVjbhpYS0XYxXR2UP+KiV/js5w=
Subject key identifier: 0B:FB:5B:AF:D8:3D:05:DA:26:DA:72:FC:76:1C:03:AF:63:A1:57:A8
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 0199FDDA2881C642524ECD21478DBAADBD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 1199
Signing time: Sun 19 Oct 2025 19:02:36 +0000
Manifest this update: Sun 19 Oct 2025 19:02:36 +0000
Manifest next update: Mon 20 Oct 2025 19:02:36 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: JYaRPQ3DXowDs7Apl8Va/VXU8O69cXCwBuhS8IDGb5g=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:28:81:c6:42:52:4e:cd:21:47:8d:ba:ad:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Oct 19 19:02:36 2025 GMT
Not After : Oct 20 19:02:36 2025 GMT
Subject: CN=0bfb5bafd83d05da26da72fc761c03af63a157a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:fb:29:49:d6:13:6b:d2:14:b2:19:5b:12:
5e:54:74:59:f9:46:b8:0a:a2:47:31:05:31:e2:53:
9a:24:93:1d:c3:a8:ad:52:6f:b2:cb:d7:59:4b:c2:
8b:58:9a:82:0f:2e:39:0f:5d:6c:43:b8:91:b0:e3:
3c:b7:9c:91:b8:7c:2d:8c:70:38:b2:3e:ff:b7:4d:
ce:c3:3a:47:77:b2:2a:23:87:b4:72:84:02:9c:cb:
53:c2:29:11:42:44:9b:e6:a7:be:78:1d:55:a2:b8:
b3:48:ab:7c:b5:e9:5a:21:5a:b5:1b:5d:dd:48:e1:
13:f9:ad:8e:03:93:38:00:34:3c:34:c6:16:a5:11:
fa:ed:21:8d:88:69:c7:76:41:03:fa:b3:08:0e:a2:
fd:8f:23:d5:d4:9a:50:cb:a1:fe:5b:13:32:2b:76:
c4:65:2e:23:ae:00:6e:6c:97:5c:c4:6b:41:d2:27:
ab:4c:15:82:9b:a3:e2:48:02:8d:27:07:82:85:2b:
b4:57:34:fc:4a:de:85:d6:3b:06:fd:d8:3a:6c:24:
ba:9d:be:64:6b:b0:ac:5b:de:02:77:b7:9e:2d:f2:
6c:68:1d:fa:fc:3d:9f:ed:80:fe:90:f5:46:ac:3a:
72:b9:2b:33:2e:06:4d:18:76:96:c7:31:2f:65:83:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:5B:AF:D8:3D:05:DA:26:DA:72:FC:76:1C:03:AF:63:A1:57:A8
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:9d:94:75:6e:e7:fc:83:f7:b7:4b:63:7d:f8:8f:d4:73:
7b:89:39:a5:81:f5:f3:f0:d3:c6:4b:88:d0:4f:d1:94:ed:22:
3b:b8:60:58:5a:d3:a7:4d:69:4b:8e:bc:75:27:03:44:65:af:
87:2e:5d:32:81:7c:7f:23:c0:d7:ce:8e:79:ab:22:c2:fa:7a:
04:52:8a:97:07:fd:02:e6:0c:02:4e:49:34:1e:7c:49:94:ad:
2e:d8:d5:43:0f:e7:15:13:1a:66:e2:1d:ad:f5:1d:35:8f:6e:
92:cd:53:b6:05:ad:46:47:23:ca:4e:2d:10:b0:2d:91:e3:5e:
61:26:f2:50:8b:9d:83:42:59:bd:6f:7a:55:b8:01:01:30:b2:
10:43:72:05:ac:38:4c:d0:aa:c5:91:1a:6e:23:5d:60:4a:52:
f7:a3:0b:15:9f:64:38:25:b2:6d:44:25:64:f2:42:40:49:74:
3b:a8:94:4d:06:78:da:08:ed:2b:71:da:a5:ad:f9:c7:a0:d5:
03:89:50:33:c7:18:9e:2a:1d:56:77:4f:d6:9a:4d:da:c6:7f:
8b:a1:70:99:60:36:ce:ee:7c:8e:26:fc:db:ff:2c:cb:a0:e2:
56:d4:67:63:d7:b4:7f:35:ba:86:ea:d3:b5:ef:17:88:fa:f2:
2b:4e:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:31 2025 by rpki-client