Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: YpqPsLFE/6FJun3NwXLYCRRdw1mT3QTuxSx1Jy5OIic=
Subject key identifier: DB:4D:67:CD:D6:4A:78:F9:AF:07:EC:8E:36:F5:5F:A7:A4:D9:37:C6
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0199FDDA490823227B6869AC19E989F9C8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: hRNX2CZyL0wp4/t8yGjDxV+y1SEExQhygl3Q/jnqWUs=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:49:08:23:22:7b:68:69:ac:19:e9:89:f9:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=db4d67cdd64a78f9af07ec8e36f55fa7a4d937c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:45:ab:75:b2:ed:e4:47:89:16:ba:14:fa:
4f:bb:cf:e6:e1:e7:d3:d8:2c:14:8f:89:a1:21:8b:
59:f7:d1:e0:39:d8:62:3e:54:7b:73:37:38:55:c0:
c1:f0:f2:9a:68:80:bc:13:94:8f:93:09:94:5a:17:
70:78:8f:8d:dc:df:d4:63:f4:0a:1a:1b:50:bc:75:
ff:67:02:fb:25:24:78:a0:c8:76:43:b6:26:7d:d3:
15:11:2a:d6:53:41:35:ea:3d:69:ee:50:8d:0a:d9:
0e:99:8d:4e:5e:a0:49:f8:81:66:98:94:a0:1d:af:
80:5b:77:6a:94:6e:f3:18:ab:a2:0b:aa:9e:72:a6:
50:52:c9:79:de:40:14:8b:e7:5b:f7:89:68:5a:d7:
c1:3f:2b:55:84:00:13:3f:6e:c3:5d:84:8b:e9:b6:
b8:8d:7b:29:cc:a8:b0:8c:1c:f4:63:3b:19:a1:11:
f4:33:c1:04:10:a4:ba:a5:91:a8:25:45:1d:08:a6:
df:cd:24:67:63:1b:40:17:cb:6f:7a:1a:2e:69:39:
a1:84:cd:91:b6:84:63:4a:4e:34:03:13:13:e0:bc:
2e:1a:83:d0:38:d6:0d:3f:f0:2f:e6:91:98:80:90:
09:15:0e:b5:92:32:31:74:b1:a6:15:22:1c:a9:5e:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:67:CD:D6:4A:78:F9:AF:07:EC:8E:36:F5:5F:A7:A4:D9:37:C6
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2f:4c:26:7d:c8:8e:f5:19:44:24:b3:6c:04:8d:68:e0:bf:
15:fa:06:e0:a7:8a:e7:b3:b3:9a:10:c1:dc:80:70:a2:61:09:
c3:91:fa:b6:11:82:e0:67:c5:94:93:35:e6:c2:fe:1d:44:97:
6d:16:c5:34:a2:39:9b:ee:7c:15:c6:21:21:b9:e1:58:0a:0b:
12:22:ff:2e:a7:33:41:cb:d4:2d:99:9f:c7:ec:f9:ad:d0:bf:
70:c8:5a:bb:23:5a:cb:bd:7b:f3:fb:92:9f:a5:1f:54:26:25:
15:f9:f3:f4:3d:be:40:62:06:6e:7f:4f:20:a4:07:c7:86:56:
5c:66:58:2f:39:d0:59:d3:30:3b:71:95:dd:ca:9e:26:f9:0a:
70:50:84:5a:74:3b:06:97:7b:de:67:33:33:33:44:23:65:e0:
5a:c6:51:53:bb:54:49:37:cd:df:e7:f3:15:95:3e:09:be:74:
f3:72:57:af:95:0b:19:cd:92:b7:69:49:37:00:e4:e5:a7:ad:
91:1e:46:49:f0:fc:11:f5:56:e3:7f:d6:93:58:63:d1:68:79:
5a:6b:77:f3:4a:51:f6:4f:b7:b7:e0:e1:e9:97:11:7d:fd:cc:
c5:15:f9:e7:6b:71:5e:18:c0:49:64:a7:38:08:d7:28:03:bc:
04:77:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:58 2025 by rpki-client