Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: s0JxZkLPlYG2MlSXFwf/XO9Xt6q8WgofzsFCDE+s5jg=
Subject key identifier: E1:7A:1B:01:8B:75:5C:C3:58:C3:50:97:2C:8E:6C:06:66:38:E4:B1
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 0199FCC64B124471E174A955248158DCC9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 10BE
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=)
2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=)
3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=)
4: UVdJ6rkBr4eKgNxEkOLstufV6r8.roa (hash: +gXeK3tudL2I9QvUvgp4q5Jq/oJHp1PYKMtr+laCpNs=)
5: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=)
6: YaM_6GNAfAUY1a7EBWWPiZdkY80.roa (hash: imYp4kHblD7OJu3xkBBiybF6gSfL+pAE8EuXrkCO7Ws=)
7: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=)
8: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=)
9: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: a+VTGx/X2fCMecI9PegWw9l5s7YQUglNLR/X0kPT8Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4b:12:44:71:e1:74:a9:55:24:81:58:dc:c9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=e17a1b018b755cc358c350972c8e6c066638e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:8b:c2:56:37:60:bd:5e:99:ec:e6:b9:9a:
67:05:79:1b:4c:43:f8:9b:b9:ec:76:f4:d7:40:8f:
05:a3:8a:03:fd:76:0e:ee:7f:b1:cd:a0:42:ed:6a:
bc:4d:24:01:92:bf:6e:ff:ac:3b:dc:f4:a7:7b:c3:
6a:9e:36:af:9c:81:73:12:94:2b:df:96:93:98:8f:
57:0d:de:62:df:8a:83:50:fe:d0:e3:7d:bb:76:6c:
a4:60:1d:7e:98:f3:c7:ce:b4:11:9e:e8:33:45:3b:
a8:07:24:81:4b:b8:6a:d0:6c:0e:99:2f:2e:91:c4:
73:64:61:3b:37:02:af:41:4c:30:9d:4f:2a:53:6e:
60:08:34:45:73:51:e5:ab:41:78:ee:2f:76:32:2c:
17:bd:53:23:e8:75:79:a3:75:76:db:e4:9c:1b:08:
00:95:4f:be:6b:e2:5f:16:a0:e0:46:82:1e:8b:0a:
37:29:17:b9:1c:41:28:c4:05:bf:7e:a6:fd:30:8e:
8f:2b:b3:84:64:12:b9:41:83:7a:34:27:2f:fb:2f:
ed:d2:9e:16:c2:00:d3:5f:82:2d:c1:2b:37:48:f0:
31:b7:2c:fb:9e:31:0d:ec:f0:62:d6:2d:57:3e:ba:
b8:de:96:82:f8:e2:10:f7:6d:bf:ad:65:33:e3:88:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:1B:01:8B:75:5C:C3:58:C3:50:97:2C:8E:6C:06:66:38:E4:B1
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:48:11:40:21:45:be:2c:14:c5:77:48:f5:64:e7:cf:ca:3c:
53:4d:3c:6c:5f:38:8e:d4:da:25:dd:fb:e0:74:f8:17:32:90:
ae:cf:a3:54:5f:46:3c:bf:3d:7f:39:27:76:02:13:69:d1:e9:
76:c2:4c:04:1c:be:9d:af:41:a0:25:9d:9e:3c:14:3f:4f:6a:
da:48:ba:56:f1:fe:97:fd:a0:2b:bd:48:ee:6e:09:8c:d3:e3:
04:8c:a7:80:e4:87:f4:2c:d2:9a:ec:30:b9:87:99:93:b7:09:
45:4f:f9:e1:c4:3d:8f:1a:61:e1:de:64:d8:f7:25:35:2b:35:
47:d0:d9:0b:86:0c:57:bb:f5:a1:25:25:c7:27:dd:6b:21:68:
54:fe:4c:38:52:24:ba:3a:fb:d5:21:0c:1b:09:1f:be:d0:e4:
12:ba:3d:10:78:84:02:dc:73:48:f9:31:3e:ff:ec:96:3a:0a:
5a:58:78:97:fc:2e:b2:54:6a:86:d3:c3:89:e8:07:f4:78:04:
b8:e2:76:30:f2:f8:0f:76:b4:d4:bc:cf:2d:43:2c:51:6a:e9:
12:9a:51:70:8d:df:7c:dd:ac:ec:f5:da:4e:7c:8a:f9:de:a9:
7e:19:67:20:86:c3:9d:7a:6b:c2:09:09:fe:2d:1b:f9:03:15:
39:0d:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:12 2025 by rpki-client