Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: 5T+UmsxbG5b9VATZsC8TAm7nI1zG1WNdYG3dCU93lmM=
Subject key identifier: 0B:A7:FB:35:58:26:1E:83:99:A8:0A:88:E0:2A:1B:6C:49:69:71:F2
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 0199FBEA735E5E930D93649BC4FE930AB104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: XlFdfP/GuWJICGcxj65FoF3nb7mn6t/p6pw7z5sUlyQ=)
2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:73:5e:5e:93:0d:93:64:9b:c4:fe:93:0a:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=0ba7fb3558261e8399a80a88e02a1b6c496971f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:72:12:60:59:d0:69:5b:81:15:e2:02:4e:
4f:ff:67:98:e7:05:07:2e:7e:1d:be:39:a1:5a:8c:
8e:ce:fc:08:45:67:c5:cc:63:13:2c:3d:29:8d:25:
f5:79:bf:92:80:47:4c:1a:f0:02:ad:b8:99:72:70:
27:11:57:f8:d4:30:19:10:64:a6:8e:ee:0d:c6:c3:
42:40:f3:86:4e:0e:c6:32:f5:2c:7b:a9:01:0a:8c:
cb:23:25:f3:1b:61:55:40:66:ae:4e:d7:78:3f:fd:
6d:f3:c3:7d:d3:c1:53:81:fe:c5:18:e6:34:4f:57:
70:fb:2f:16:e4:21:e3:07:c0:8d:3d:93:94:a3:e5:
a1:64:04:86:20:f7:ba:22:f5:c7:3f:27:9b:b8:fd:
e9:46:f4:8f:04:40:92:1d:61:4b:d6:da:e3:76:e6:
44:34:14:b8:7f:92:c6:86:53:13:ea:d2:ac:ab:fb:
88:d2:ab:e7:50:49:7b:42:a9:56:26:e5:d8:08:6f:
a1:d7:df:30:6c:58:74:78:d8:35:8d:79:9a:70:19:
da:19:db:67:1b:0d:ad:46:40:dd:cc:71:ef:2a:bb:
ee:46:33:02:c0:fd:c3:72:29:cc:0b:ce:86:cf:8e:
b1:59:00:52:50:19:a9:dd:a9:c1:2f:a3:cb:4d:27:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:FB:35:58:26:1E:83:99:A8:0A:88:E0:2A:1B:6C:49:69:71:F2
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:45:64:6c:85:c2:b4:81:36:f4:13:13:b2:a9:74:fc:79:
21:da:3e:02:71:1c:74:7c:48:3b:fc:d6:e9:a6:a7:7a:0f:6e:
70:db:1a:71:aa:a4:b2:c5:46:48:02:f5:ed:ae:de:1b:c3:4f:
14:c9:20:09:ca:34:cf:48:d7:e6:49:62:cb:a0:a0:f5:92:d2:
ba:cc:f7:1f:38:99:11:88:95:3c:b0:b8:fc:5f:48:59:38:d9:
46:fd:5b:df:b4:1e:80:30:05:eb:bf:0c:79:3b:40:23:ee:ca:
86:9e:ad:83:41:99:62:da:77:1d:50:11:a6:72:21:31:35:80:
02:eb:3b:fc:47:6e:f0:30:01:c2:e2:50:b6:c0:6f:0e:66:5b:
e5:c2:99:7b:56:5b:04:ef:8d:9e:95:da:7a:57:d5:ef:5d:81:
3c:6c:95:e8:cb:5e:ea:ec:52:df:64:2d:98:dd:4b:17:23:8a:
2f:5a:25:d2:de:30:db:8a:36:db:0d:96:9d:df:ac:65:15:c8:
36:b5:ea:4e:d9:f4:4b:7e:dd:1c:91:49:9a:bd:00:4f:3b:83:
55:a7:f6:7a:5c:f0:51:76:df:c3:dc:32:aa:4c:76:17:68:13:
3d:db:ee:78:fb:97:a0:d1:0a:7f:d6:d2:fb:8c:57:19:35:4b:
34:fb:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:51 2025 by rpki-client