Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: NTm+xpCSj5XwMLKz+G9rWc1qKOndVV2W1fJzymi1SdE=
Subject key identifier: 2B:97:63:4C:B9:E3:6C:CD:68:D2:AF:5D:0F:61:BB:38:FB:E3:A2:E8
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 0199FFC762591C234E59DEC79EB48D020C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0E44
Signing time: Mon 20 Oct 2025 04:01:20 +0000
Manifest this update: Mon 20 Oct 2025 04:01:20 +0000
Manifest next update: Tue 21 Oct 2025 04:01:20 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: qul7xG9uhfJf6J/HOrxSy7EpTAXFl9raR/sd/kp3De4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:62:59:1c:23:4e:59:de:c7:9e:b4:8d:02:0c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Oct 20 04:01:20 2025 GMT
Not After : Oct 21 04:01:20 2025 GMT
Subject: CN=2b97634cb9e36ccd68d2af5d0f61bb38fbe3a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:37:ee:c1:cb:4d:0b:90:10:6a:26:20:91:
27:f7:25:9d:12:c7:99:94:4e:97:04:3f:64:0c:90:
45:d2:e3:fb:c3:de:62:80:a9:fa:1c:24:30:85:57:
da:fd:de:da:48:a2:70:68:ae:02:0e:d1:d1:17:59:
7d:96:5a:d6:e8:ab:20:e6:09:e2:87:5d:e5:65:d4:
e9:1e:40:73:73:d6:6a:36:0b:a1:ca:54:15:70:5e:
7a:9e:43:2d:d3:aa:42:4f:f3:e8:cc:09:47:31:66:
e7:32:7d:19:54:f8:71:67:ec:1c:f9:70:3c:58:73:
7b:48:71:7a:d6:38:f6:2c:eb:ec:c4:7d:a8:5e:33:
85:b1:17:e1:c8:bb:9a:19:e7:6f:14:fd:f4:bd:e4:
80:54:8c:46:f5:27:88:5f:4d:a8:89:ac:a7:e3:54:
32:e4:83:de:12:c7:7c:26:39:6b:10:ca:d9:36:48:
33:81:f0:58:ff:4a:0f:42:d3:05:b9:ee:93:6a:fd:
94:51:4d:57:d3:a9:ff:9a:24:87:86:46:4b:64:dd:
f7:73:79:9d:5d:67:d4:44:77:44:3a:38:30:2f:16:
31:84:b1:28:05:5f:50:0c:3e:02:69:d3:8d:83:c2:
d8:7d:71:56:f7:7f:18:9b:6b:51:e1:82:4b:b2:04:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:63:4C:B9:E3:6C:CD:68:D2:AF:5D:0F:61:BB:38:FB:E3:A2:E8
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:d1:ce:07:a7:6e:bb:53:26:e7:63:13:d8:74:8f:86:8d:
d6:c5:e7:83:4d:29:20:8c:34:fb:e9:57:7a:07:71:a3:7c:7c:
82:e0:47:b4:50:4f:54:1c:5c:6e:54:05:58:83:b2:2b:0f:88:
02:76:a0:56:05:82:e3:4a:01:8a:13:21:38:1b:5c:db:b5:5c:
0e:4d:a1:c8:1c:42:6d:01:a8:06:20:b9:6c:f3:5e:e4:06:4e:
84:16:12:fb:70:e3:96:58:67:ea:ce:1d:e1:7e:4d:93:43:72:
61:6d:8c:57:06:20:99:cd:aa:78:15:a4:0f:0c:19:1b:93:49:
a6:9c:07:7c:b7:2a:7a:5b:6f:b7:bb:15:aa:62:7e:e5:d5:f8:
54:8b:6a:2f:d9:70:26:1d:54:53:97:fa:c2:54:4b:3e:d7:72:
bd:41:54:a4:f9:82:36:f0:db:aa:9f:ba:fa:02:8f:4e:ce:de:
56:f3:16:88:a0:ee:87:bb:5a:ec:3d:f0:6b:ae:c3:27:67:af:
83:cb:a6:ac:75:0b:7e:5f:d5:00:5e:c0:99:f1:bc:f4:79:62:
ee:c3:7d:70:f6:f9:b8:60:ae:91:7d:91:76:5c:64:e8:75:54:
9b:16:3d:6d:78:6c:cf:83:59:c8:2a:a3:01:b6:ce:14:0c:13:
84:a8:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:25 2025 by rpki-client