Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: SGU5bwmyIB4iLNgAZlbecqE73cjx8mZ7ccbjDO0jtJM=
Subject key identifier: 20:B7:53:ED:FD:90:08:7A:23:F7:B9:82:BF:B6:3B:3F:04:61:E7:A4
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 0199FD6B6ACB68F4EC28488BABC3D4424302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: GsGjXLX7HgALKRi62RQT3eKE5Z08GByvMw+txYJOD4U=)
3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6a:cb:68:f4:ec:28:48:8b:ab:c3:d4:42:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=20b753edfd90087a23f7b982bfb63b3f0461e7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:31:a7:f2:5c:3e:75:36:04:93:15:91:ba:
31:cb:87:af:ba:8f:20:ae:d5:25:31:e7:a2:9f:a2:
48:a6:5d:30:48:c6:b4:81:01:94:06:e1:75:0e:2d:
2e:8d:2e:10:49:0e:1c:36:f9:cf:f6:9a:6b:4e:a9:
8d:9a:63:13:d4:4a:41:7e:1c:b7:5a:e1:f4:d4:39:
30:47:87:a8:d0:3f:4d:cf:44:89:df:1b:d9:6e:39:
a0:4c:9c:d8:8d:62:e2:cd:33:65:fb:47:8f:02:98:
0b:31:15:7b:b4:49:1f:de:4a:2e:76:5c:f5:e9:dc:
36:73:3d:53:3c:e3:57:ff:eb:ed:c9:04:0c:1c:1b:
69:51:64:1f:a0:da:7d:0a:a4:78:eb:a4:b5:bf:61:
3a:47:46:79:ec:53:fb:d9:8b:3f:43:ec:0a:c5:63:
3b:8a:46:50:91:4c:06:7f:0c:05:63:d8:e0:38:ab:
e6:56:d7:22:72:3b:fe:fe:d1:31:e3:50:a9:f4:fc:
94:32:65:71:2a:c6:f8:20:e1:ed:a0:22:e7:28:c9:
f4:3c:bf:ac:af:fa:44:1a:ac:59:db:84:86:4b:23:
fa:3b:46:3c:35:fe:6a:7b:3b:8d:56:41:b5:4e:47:
04:fa:fe:28:a5:bd:d8:82:b8:80:59:fc:c8:eb:2e:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:53:ED:FD:90:08:7A:23:F7:B9:82:BF:B6:3B:3F:04:61:E7:A4
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:08:4b:37:29:60:6a:4a:9e:c4:46:c4:d3:cc:8a:7f:29:
57:f1:c6:76:e5:8b:93:75:6b:b8:ef:8d:44:03:59:0a:1e:06:
d9:1c:6f:c4:f9:13:23:5c:9e:9f:e0:94:96:23:85:bc:2b:f3:
cd:ea:db:d3:b1:96:f7:6d:47:7b:d6:75:cd:d1:f4:ea:d6:6c:
9a:e6:ae:f3:10:ec:98:b5:99:dd:f8:ec:52:f7:f7:e0:9a:a1:
ae:d0:f7:33:0f:d8:25:af:81:f4:2b:52:bc:61:45:c4:08:66:
7b:9d:aa:5a:bd:c0:04:21:80:6e:83:ee:0f:49:83:83:e8:14:
5f:e1:f5:54:80:ef:24:58:96:03:71:50:12:03:38:47:ff:e7:
3e:42:cd:a6:d5:e2:bf:bf:b5:3b:b5:8b:83:5a:e6:9c:4c:b4:
56:60:bd:d5:d5:26:e6:93:69:f2:6f:60:4f:df:5f:9c:4c:a7:
d5:1e:52:8c:ba:6f:95:b8:92:75:a4:0e:4b:40:fc:0a:cd:55:
34:fe:a9:6b:6c:bf:93:bf:f8:90:13:08:b4:04:f7:3d:6a:a9:
fd:57:3c:a9:17:61:4a:b1:5e:14:87:c2:6e:7c:75:37:80:b8:
ae:1f:68:66:ff:12:da:45:e7:f0:bd:fd:89:9b:1a:dc:9b:98:
ab:de:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:11 2025 by rpki-client