Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
File: 5vxHDvW4iHmlId3t94cHhZubDjc.mft (raw, json)
Hash identifier: D/7KmaB+7Bv2Vw5JGovvDVUo3uDw/7RHurVp5SwIdqk=
Subject key identifier: 45:60:E6:04:15:0B:6F:ED:46:66:64:4C:AF:A5:BC:EB:3C:B0:48:0B
Authority key identifier: E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
Certificate issuer: /CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Certificate serial: 0199FBB35FB327F261CFB81AF983086EC61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
Manifest number: 58
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 5vxHDvW4iHmlId3t94cHhZubDjc.crl (hash: f7MNGksNkTw2p8pEvtK9aSILSM73KnWe/L++pMtdDiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5f:b3:27:f2:61:cf:b8:1a:f9:83:08:6e:c6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc470ef5b88879a521ddedf78707859b9b0e37
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=4560e604150b6fed4666644cafa5bceb3cb0480b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:b2:6d:9c:94:83:2a:bb:13:c2:27:dc:48:
56:8b:c3:cc:e6:86:ea:35:68:73:28:87:95:d4:b6:
9f:74:07:48:65:14:95:d0:17:76:98:87:77:07:37:
fb:6b:ef:d9:3a:80:c4:bf:a7:3b:c6:d3:77:0e:28:
45:0a:9b:a5:ec:eb:c7:18:a7:28:39:cf:0c:e8:e2:
3c:aa:b3:79:ed:a8:65:22:b3:a0:52:df:39:6a:30:
33:bd:f6:dd:4d:8e:02:fd:4f:82:70:20:0f:43:db:
c3:d6:bc:69:5c:18:1a:4c:c5:24:92:c3:ef:94:d8:
cf:5e:0e:a2:fd:eb:f7:1e:22:c2:1f:b4:a3:57:53:
1b:97:2b:b4:d6:02:e2:cf:ab:30:b0:89:01:3b:8d:
5b:42:48:53:d9:5e:33:bf:3c:8e:59:99:ba:6a:8d:
5b:60:ab:06:de:09:87:1e:70:d4:f2:38:e5:d5:d3:
97:17:bd:99:a2:a1:be:2a:a3:f3:04:1c:fb:d6:ba:
34:b2:7f:9e:0e:2b:25:cf:e4:30:d8:69:63:7f:02:
80:1d:09:54:33:96:41:10:16:c5:09:7e:1a:79:f4:
86:d8:e6:9a:c6:37:9d:80:ef:5d:18:9c:ff:14:43:
a5:39:25:19:a2:71:97:c5:c1:70:dc:66:e9:72:66:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:E6:04:15:0B:6F:ED:46:66:64:4C:AF:A5:BC:EB:3C:B0:48:0B
X509v3 Authority Key Identifier:
keyid:E6:FC:47:0E:F5:B8:88:79:A5:21:DD:ED:F7:87:07:85:9B:9B:0E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vxHDvW4iHmlId3t94cHhZubDjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b0d5a1-5fb2-4d31-904e-7037ef49ac2d/1/5vxHDvW4iHmlId3t94cHhZubDjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9b:c6:e4:bf:ab:f4:28:e2:55:a6:68:79:53:76:93:94:0b:
d2:f2:50:9a:e7:ec:e5:47:d8:f6:56:6d:4e:0e:82:d4:9a:93:
30:6b:cf:ee:cc:05:7a:8d:65:6b:2d:9e:c3:1b:c6:b8:7b:f4:
83:52:ad:d1:b2:0a:7d:5c:69:a1:43:ab:20:cd:8a:62:41:4d:
2e:a7:43:fc:f3:31:89:91:24:8b:8e:3f:fe:d8:65:8e:6f:da:
dd:9b:b2:ed:86:31:40:6f:c2:30:ff:82:35:4e:7a:26:73:71:
ba:4a:de:d7:3a:27:8c:e0:24:a9:1d:7a:39:2d:fb:48:0f:fd:
50:92:ff:dd:d3:f5:b2:ba:f0:a1:5f:4a:f8:8c:e8:c7:0d:21:
93:dc:23:9a:6b:80:4d:21:98:c4:12:1f:77:aa:8e:bf:37:43:
58:0c:f6:11:d9:41:54:86:34:eb:0a:f2:f6:5a:81:e7:b6:be:
0b:26:42:58:fa:e0:88:04:17:a2:74:6a:d3:09:ba:d1:82:a7:
8f:e4:21:a8:ca:4f:ba:fc:74:77:f4:6e:d2:60:d9:a6:a4:62:
44:b2:3b:c7:e7:98:2b:af:b9:73:60:73:5f:68:b1:22:b8:c5:
d7:81:89:b1:65:37:c6:ec:c2:c2:19:a7:c8:47:59:50:54:8c:
af:aa:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client