Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: 99B8PuFc1lAxyMW3IFAIT/CrFAhZ0yKcZMwCrUWU7R8=
Subject key identifier: 90:CD:A8:FF:21:EE:8E:65:67:D0:ED:EF:D0:A1:06:36:6F:F5:B4:72
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 0199FEB4E89B094887012C568367D85E864C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0DBA
Signing time: Sun 19 Oct 2025 23:01:32 +0000
Manifest this update: Sun 19 Oct 2025 23:01:32 +0000
Manifest next update: Mon 20 Oct 2025 23:01:32 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: waWWlERhD7iKwhpfttxrBBcgrWntxE68MgEutY3MXdo=)
2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e8:9b:09:48:87:01:2c:56:83:67:d8:5e:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Oct 19 23:01:32 2025 GMT
Not After : Oct 20 23:01:32 2025 GMT
Subject: CN=90cda8ff21ee8e6567d0edefd0a106366ff5b472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:00:ac:90:fe:26:c1:a3:cb:b7:a2:0d:01:
66:b0:0f:50:6f:6c:8e:28:8a:01:82:a4:c2:40:9f:
fd:9f:cd:5e:8b:9a:77:5c:69:88:28:f6:25:82:76:
69:9d:4f:b6:f8:a2:3e:f5:96:84:e4:11:e5:8e:20:
8e:5c:51:9d:f8:32:2c:8e:db:67:41:28:89:ab:5f:
b9:22:70:29:22:a8:b3:49:a2:d1:55:5c:f0:49:c8:
7d:a6:00:68:9a:86:df:d0:a1:55:ed:49:b6:73:9d:
c7:e2:6f:e2:ac:77:fe:9f:2d:f2:10:31:1e:f1:8b:
25:2d:70:61:7f:1a:be:6a:74:f8:72:8e:42:8e:a6:
7f:7d:bf:49:05:e4:15:d5:63:50:de:c4:52:dd:b0:
77:3d:33:f3:44:df:4f:7e:1b:b4:12:6c:92:fa:bc:
2e:d8:8c:4e:03:84:60:1a:a4:be:46:fa:53:7d:df:
bb:54:ca:32:65:4b:df:16:0a:fb:b1:fe:1a:a9:73:
78:58:27:bf:cd:e4:29:a3:d1:c1:7e:49:9e:d3:22:
1f:b6:d4:6d:8c:8d:a8:f5:aa:c2:9e:99:14:c9:a3:
55:11:e7:03:24:88:ee:f2:ca:f0:5f:d4:88:ad:32:
44:60:73:a4:01:c7:dc:1a:a7:a6:64:14:52:af:a6:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:A8:FF:21:EE:8E:65:67:D0:ED:EF:D0:A1:06:36:6F:F5:B4:72
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:76:f9:cf:6e:f2:7b:b8:a9:86:6f:af:0d:5c:c2:39:ee:
79:05:06:45:ff:ec:29:9a:68:41:1d:d4:b9:5c:e2:c8:0c:4d:
19:ae:b8:a1:9d:a0:9d:a9:96:f2:a0:9a:2f:30:67:43:66:9b:
9c:ef:ab:14:90:75:56:95:12:95:64:ce:eb:60:57:27:28:c2:
19:7c:5c:a0:0a:50:54:86:9d:a6:62:f4:06:72:9f:14:ba:c3:
2a:86:bb:57:6e:87:b2:04:2e:aa:1a:70:35:86:0c:3f:ff:b5:
de:f8:c5:79:37:0b:8e:83:48:f3:73:e1:b8:5c:2a:12:37:8d:
80:bb:20:67:53:81:1a:d4:56:ac:e7:ea:06:ec:6a:df:c3:f0:
cc:b5:22:8b:96:6f:ff:48:58:d4:ef:87:35:92:ea:0e:64:e3:
4a:ca:26:fe:be:64:cf:41:27:4c:d1:34:3c:da:a0:07:de:35:
77:53:ad:f1:c9:87:0e:a4:ea:56:52:05:3b:9c:42:94:ef:54:
89:50:13:3b:a3:08:74:03:92:1f:ee:cc:fa:3d:53:ad:68:68:
9c:06:ce:11:7b:ce:58:31:cb:20:a9:82:2e:bf:a3:e3:70:c8:
29:2d:90:de:22:55:2e:82:a7:e0:39:54:d5:cd:04:de:fe:9d:
90:9e:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:38 2025 by rpki-client