Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier: U4bvU5eMy9sORZTvZg2QczvoPeS9uQBuCUPgzjtqyFM=
Subject key identifier: 1A:6B:E5:8E:1D:0C:5C:36:65:A3:2D:4B:5B:D4:12:54:87:FB:97:F1
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer: /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial: 019A0035448E5DF03D662C3F11C369DE4CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number: 1625
Signing time: Mon 20 Oct 2025 06:01:22 +0000
Manifest this update: Mon 20 Oct 2025 06:01:22 +0000
Manifest next update: Tue 21 Oct 2025 06:01:22 +0000
Files and hashes: 1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: Eb//UHTb6YEon1j1UEGgpARgoupPPM/6BkKvgbn9vDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:44:8e:5d:f0:3d:66:2c:3f:11:c3:69:de:4c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Validity
Not Before: Oct 20 06:01:22 2025 GMT
Not After : Oct 21 06:01:22 2025 GMT
Subject: CN=1a6be58e1d0c5c3665a32d4b5bd4125487fb97f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:ce:d8:f4:61:7d:ca:0c:f1:ec:ab:66:dd:
b2:f7:b5:64:6b:64:c9:b3:40:5e:1f:9d:19:5d:14:
b7:c7:53:1c:1f:6e:98:e1:10:16:22:8c:51:74:cc:
a4:d7:58:f0:d8:c5:0c:e9:36:14:80:25:cc:28:b9:
3e:00:e8:fc:34:cd:3d:ff:49:4b:b3:5a:50:c1:36:
c1:a2:ba:f1:88:d8:7a:5c:98:c1:80:61:c6:bb:0a:
e8:42:b7:f0:99:c7:2b:84:a4:fc:09:cf:33:bb:ec:
51:3b:39:bc:09:60:ae:26:e5:8b:88:48:d4:bd:93:
2b:d1:dd:42:36:c8:8f:3f:2a:63:dd:d3:55:ac:fa:
3d:04:11:56:dc:1b:89:fb:25:23:1a:72:5e:8a:e7:
3b:72:04:30:f3:ff:d9:9a:97:94:78:94:f5:19:fc:
f7:54:ac:70:83:26:03:63:ac:63:f3:cd:2b:09:7e:
24:d9:68:29:77:ad:65:d3:3d:ae:55:76:e0:6b:67:
9e:7a:f2:ee:0d:5c:c8:2c:a3:61:7f:bd:09:f9:a3:
56:ff:84:de:90:85:43:8c:a7:6b:ac:cf:31:4e:4a:
e6:82:97:15:b4:95:b9:36:e6:6f:3a:a2:28:53:45:
68:1b:47:63:74:cc:2c:49:48:ef:14:7c:06:4f:56:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:E5:8E:1D:0C:5C:36:65:A3:2D:4B:5B:D4:12:54:87:FB:97:F1
X509v3 Authority Key Identifier:
keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0e:d1:45:2a:65:f0:8a:c9:d4:ea:00:9b:d1:ce:d9:e0:a1:
cb:04:82:99:f2:b0:1c:02:f8:69:88:36:0f:31:2c:7a:20:b6:
84:4f:aa:97:17:f9:e8:17:18:df:43:65:6b:48:48:d3:df:b8:
af:5c:6f:e6:69:dc:6a:ce:83:da:e9:96:7b:be:c4:65:10:75:
de:97:57:eb:42:99:93:d4:45:1e:3e:13:96:6b:fd:a2:7f:71:
16:97:04:19:52:50:23:e6:1c:71:4e:29:c1:86:8d:23:f1:93:
48:05:bd:d3:2b:f6:b7:df:70:b4:83:ac:14:c0:fd:ce:89:bb:
29:4b:e3:59:f1:97:34:de:a6:3d:8c:db:d0:d8:49:68:f6:9e:
2c:c6:f9:af:f6:e8:68:05:11:8d:5c:fc:68:2a:42:9b:e4:28:
6b:7c:8c:97:41:ce:07:a8:37:ea:65:30:65:d0:e2:d9:38:e0:
bc:6b:59:fc:99:e4:c1:aa:1c:cb:b6:ae:33:85:b6:e0:09:f0:
81:b2:70:65:53:51:c4:73:b0:20:11:54:71:2b:32:7a:df:2d:
05:4f:cb:2d:c1:76:71:51:1b:b6:24:36:e0:dd:40:39:07:c4:
8a:81:24:f6:05:c1:94:0b:6c:1f:84:30:4a:57:79:9c:5f:2f:
76:d6:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:12 2025 by rpki-client