Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: NkannszGUaC/HMM7HnG1n/KOapODi6iFJD7ktz/pJnY=
Subject key identifier: 2D:E6:18:72:40:AF:E5:C7:41:22:7F:C9:62:AB:04:ED:F9:74:94:1C
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 0199FCFD6A47E33CE988829B40786189394D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 1504
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (hash: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=)
2: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: Xw6gISJLzhZteFCZh1s2i6ddPaR0VX38rauLPkjCEY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6a:47:e3:3c:e9:88:82:9b:40:78:61:89:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=2de6187240afe5c741227fc962ab04edf974941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5e:e5:44:1c:c3:8c:19:ba:cc:1f:dc:22:41:
7f:bf:ab:e8:98:ec:83:45:ca:f5:b7:d4:8d:93:10:
0f:a5:5a:a4:f2:5b:3c:47:ad:3b:44:bc:c0:ba:ac:
f6:00:0c:f9:07:f4:d6:ec:ea:66:dd:90:dc:7a:56:
c3:13:39:76:aa:9a:a0:b0:f9:0a:25:0b:c9:62:6c:
86:e0:7d:ab:c4:56:05:cd:4a:84:a9:92:c9:cd:61:
59:32:f8:cd:89:0d:ce:f1:41:bd:8b:7e:97:68:88:
65:6b:3b:2a:87:42:06:6d:a1:9f:82:2c:31:f0:18:
8b:c3:7f:d7:84:c9:f3:6e:43:23:a5:06:cd:ec:e6:
5d:68:81:41:65:de:86:32:1e:54:fb:27:99:91:d8:
0e:8d:da:d9:28:6f:6a:c3:9d:fd:15:fb:cb:ce:63:
86:15:4e:5f:f2:56:f5:cb:4b:1d:93:db:16:dd:d3:
92:d4:f0:29:bb:30:07:23:11:0e:55:34:63:58:b3:
eb:f3:89:ba:e5:e9:7e:79:2e:3a:d5:cc:26:5f:ca:
47:7f:ae:e6:df:88:61:8b:eb:58:d2:76:32:8b:3b:
76:fb:15:7f:d5:12:1c:f4:8e:53:92:ff:f9:77:4b:
b9:47:3b:03:4a:17:9d:d6:66:60:bd:2e:6b:fd:f6:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:18:72:40:AF:E5:C7:41:22:7F:C9:62:AB:04:ED:F9:74:94:1C
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:93:cd:44:89:6c:30:c3:94:be:67:3f:48:bf:57:be:79:
ae:54:67:24:0c:ed:b2:d4:b9:42:c8:67:8c:ef:87:6a:05:1f:
18:df:b7:24:29:37:9f:83:b6:9c:dd:73:69:fd:fa:95:40:19:
95:0d:bf:8c:12:3b:63:f2:e4:47:89:3b:88:84:3b:55:a2:e6:
1f:63:91:c6:3d:9b:5f:0c:7e:a3:0c:11:85:a8:c8:d0:3e:f6:
6b:cc:8e:d1:21:21:98:89:93:c3:30:4a:30:d3:09:4c:a1:3e:
9f:38:ff:a5:82:bf:f7:e1:fd:19:c1:e7:e7:09:87:93:bf:62:
ad:86:ac:32:b3:1c:1d:80:fe:55:e3:aa:e5:4a:bd:1e:85:4f:
77:98:e0:6e:2a:83:13:83:6f:a6:f6:f6:7d:f6:be:8c:c6:38:
10:d1:4c:74:56:88:4d:9c:b3:3f:88:08:60:c1:e6:01:f6:e7:
4d:1b:64:e3:56:32:9c:a3:16:7b:6b:01:96:ea:d8:b2:9b:7b:
3b:86:4b:58:e7:f1:12:0b:ad:6d:eb:2c:b7:c3:2f:bb:5a:99:
53:e8:8d:c3:40:9c:8f:d2:2e:9e:61:b1:7e:1c:19:49:cd:9d:
d5:19:de:95:76:b2:95:84:41:24:87:8a:24:58:f9:c9:ee:e2:
d7:f2:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:41 2025 by rpki-client