Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: ZgyWDaavJ37XOcZ0cAM3YwPvAu7Rzjh7VbvsxBlCWo8=
Subject key identifier: F6:31:C0:58:EB:66:73:D1:C3:A8:C4:1D:AE:A3:14:DD:74:09:73:C0
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 0199FEB50C85581CFD44D2B188F58A25EC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:42 +0000
Manifest this update: Sun 19 Oct 2025 23:01:42 +0000
Manifest next update: Mon 20 Oct 2025 23:01:42 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: G8B7BD9CJ0ebv0ACgmTj2IKRHxpw3r/ZiPRg08TlO1s=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0c:85:58:1c:fd:44:d2:b1:88:f5:8a:25:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Oct 19 23:01:42 2025 GMT
Not After : Oct 20 23:01:42 2025 GMT
Subject: CN=f631c058eb6673d1c3a8c41daea314dd740973c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:a4:87:43:d0:64:cb:59:eb:1b:5f:1f:68:
b1:fa:09:bb:5e:d1:d2:83:08:19:1d:a7:bf:08:65:
f8:39:51:87:1a:32:4b:6e:59:ca:40:3a:c0:26:7b:
43:87:18:f2:95:81:69:db:ef:04:19:32:51:d1:85:
47:69:dd:77:29:ae:22:56:05:95:ee:5b:81:c8:63:
f1:f0:6d:10:78:13:69:c2:fb:62:67:7f:b3:2a:02:
6a:14:ba:f3:73:61:7f:da:51:0a:0a:00:98:bb:13:
ad:6e:4d:d7:7a:89:5b:8c:e3:85:b5:2d:c2:18:2e:
f8:95:45:29:27:9a:ae:d0:57:c2:e4:51:fb:f0:31:
ca:13:0a:7b:fc:3a:86:a7:41:00:d1:50:d8:15:9c:
c9:79:6f:6f:20:f2:d4:25:e1:12:d1:4f:6c:af:d0:
d6:87:a2:08:34:be:e4:64:cb:8e:74:84:16:53:83:
60:53:26:f4:7b:42:5a:38:3a:46:03:8d:02:1a:e3:
e0:ee:e2:54:94:9a:49:a6:1e:31:58:2e:ce:f2:04:
7e:26:fa:53:b5:9a:ce:0c:34:d6:81:da:12:5a:30:
e1:48:7a:ed:a6:c9:07:7b:2a:0e:82:7b:f0:7f:87:
46:34:35:67:6e:7b:0f:dc:0b:ea:2f:17:46:1d:0c:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:C0:58:EB:66:73:D1:C3:A8:C4:1D:AE:A3:14:DD:74:09:73:C0
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:98:31:94:68:c7:ef:9b:19:31:7a:06:9e:3d:7a:90:da:
78:a3:6a:08:c1:87:eb:7a:97:07:fa:f9:91:ba:64:d1:02:a0:
38:da:37:d1:06:2e:2f:3d:2d:f7:c7:96:5a:ab:7f:3f:d5:47:
aa:e7:c2:e8:e6:da:8a:a1:ed:90:3d:c2:91:9b:54:b4:ab:d7:
d1:bf:b6:28:29:c9:e3:5e:ce:e2:ba:78:f6:66:1a:14:17:da:
48:a5:67:ce:84:fc:1c:da:52:ec:2f:fa:62:93:52:c6:7b:df:
6b:f5:02:26:47:ae:c8:91:04:41:67:65:b1:d0:88:ab:7d:d3:
dd:29:0c:26:93:8c:1b:41:bd:7d:85:95:17:09:92:0b:e0:52:
dc:c3:ad:3e:77:75:3c:c0:90:4f:5a:a2:d4:f8:be:3c:6b:93:
35:95:f4:50:27:88:44:b5:4a:53:26:fa:5a:11:b2:34:33:b2:
9d:1e:01:82:d6:51:8f:55:4e:f0:61:26:f9:d6:db:c5:40:ce:
00:5b:7c:6b:ef:95:1c:f8:74:18:27:13:a8:a9:14:e3:67:4d:
00:3a:71:68:19:7c:ae:fe:4f:92:48:7c:ef:76:8b:97:4e:a1:
85:3a:74:b7:31:3b:01:33:66:ae:db:23:ff:f8:37:e9:86:07:
0c:17:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:37 2025 by rpki-client