Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: hFQ+8xFUtfzYeSWLQg0B5wMElUDZCC5XUXMsnsEmRBU=
Subject key identifier: E5:D5:2F:DE:D6:6C:71:E0:F9:F3:FC:48:AA:11:34:C8:CB:D9:0B:08
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0199FBEB3933BC5F0BE04F99AB4A67045BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 02B3
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: 5mzg2/d17ed3fzs9hBMrG9A8l3rTqzpgSzCW5wLQItc=)
2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:39:33:bc:5f:0b:e0:4f:99:ab:4a:67:04:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=e5d52fded66c71e0f9f3fc48aa1134c8cbd90b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:d0:e3:5b:5d:aa:e1:7d:91:85:87:dd:34:
ce:0d:48:76:32:3f:5c:e7:22:91:ca:41:3e:52:fa:
91:fa:ea:c8:f7:10:3c:96:e6:15:f1:3c:5f:d6:ac:
ec:c9:8a:54:f0:91:6d:fb:3e:aa:3c:08:45:e4:d4:
0b:65:a8:91:61:8d:b9:e2:cc:2d:74:d5:8a:72:b6:
68:2b:7b:ae:fc:a8:b8:6c:02:1c:8a:2c:4e:70:e2:
ad:0e:c5:1e:c4:ec:08:98:1e:25:16:3f:fd:d0:95:
25:46:d9:e2:76:35:98:7f:32:29:d5:fa:f4:83:d6:
46:19:f0:11:84:dc:c8:cd:f0:dd:8f:64:09:bd:c4:
eb:c9:e2:5c:01:ce:7a:eb:bb:dc:34:d7:7f:71:46:
40:70:a4:b2:0b:19:ba:0b:df:95:02:44:8e:ec:f7:
f1:58:e5:8c:5c:62:08:ad:30:88:07:1f:14:44:04:
35:cd:ea:98:a8:ef:54:9b:ad:09:87:ba:7a:61:46:
fa:38:12:bc:02:9d:1a:14:dc:da:3f:b5:79:11:a6:
2e:fd:5e:55:c3:0d:ca:39:fb:65:c0:03:37:f4:9b:
0b:05:c2:89:53:93:48:86:4f:4e:82:5b:c2:85:fa:
d0:bd:da:8f:b6:44:53:aa:0b:91:19:a1:e5:5a:e0:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:2F:DE:D6:6C:71:E0:F9:F3:FC:48:AA:11:34:C8:CB:D9:0B:08
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c4:65:4a:f3:a9:45:74:c1:6a:22:e5:5b:34:ca:86:b6:49:
9f:c0:78:9d:42:c3:ae:83:8b:ee:d8:2f:87:a9:c8:b7:e9:73:
1b:f4:c7:0b:51:27:2b:65:87:2c:09:97:bb:af:e8:5b:f2:66:
3a:3e:19:4f:1e:34:13:8d:37:ba:fe:d7:39:74:7f:95:db:29:
55:30:1b:a4:db:b5:e4:d0:6a:d1:14:bd:98:8a:26:d5:2e:94:
a8:99:49:8d:2e:c8:8e:68:25:3d:d9:4a:46:a5:8c:89:70:4b:
ff:32:3d:e0:ba:67:d8:ff:7c:2c:a1:f7:b3:77:f8:9f:ec:7f:
1f:58:fd:94:23:f1:6a:ad:25:85:f7:82:cb:8a:ae:5f:1d:e6:
28:a4:26:dc:cd:3b:f7:df:39:83:5a:70:72:39:b6:de:c3:16:
10:89:f1:c7:1d:dd:04:d6:29:d3:d8:5e:6c:99:3f:3f:04:00:
f1:49:26:49:97:4a:b8:a2:f0:67:01:3c:73:95:6f:c6:c2:20:
74:f4:1f:a9:ad:db:34:92:b4:9b:49:83:73:5f:c8:94:94:6a:
cf:a0:0b:05:2a:53:bf:75:71:39:48:68:cd:20:1c:de:04:a0:
d1:e0:d8:8f:ce:6f:67:2c:9c:dc:77:43:3b:b1:a7:e2:be:e6:
45:ab:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:40 2025 by rpki-client