Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: 5l2M2so12LVXCiIRoYIBlFzR5XfPeenmq7dSKJAEibA=
Subject key identifier: 07:02:5B:E2:41:12:B6:44:B2:E2:74:DB:73:F4:19:44:3D:50:54:81
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0199FCFD2B28BFB4EC710D627302A33E0F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 1167
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: wulV4qERbAVObenn9XRceAbBUQBNhAm2IKeph8cqatU=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2b:28:bf:b4:ec:71:0d:62:73:02:a3:3e:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=07025be24112b644b2e274db73f419443d505481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:58:f6:1f:24:a2:bb:a9:9a:80:e5:89:0f:
ba:83:4a:d9:0a:92:1b:80:6d:71:97:6a:f3:7f:6b:
19:bf:ed:19:b3:70:12:42:57:7a:66:e8:09:8d:70:
3a:b4:fb:91:4b:b8:bc:cc:62:c7:fd:22:f5:31:6c:
47:52:26:82:ff:29:ec:93:a2:57:36:91:9f:3c:98:
01:d7:e7:aa:6f:4f:5e:f2:60:0e:b4:1d:d6:f2:c6:
b5:a2:f1:9f:b0:11:f1:dd:b2:d5:da:a0:90:48:45:
ce:b4:64:39:50:3e:83:05:13:be:08:ad:c6:43:11:
29:e8:a2:0d:cf:3d:43:77:97:3f:b6:8c:99:8f:80:
4d:ce:66:5f:e1:bc:92:30:95:a6:a3:dc:2b:2d:17:
db:6a:a9:34:1e:51:32:b8:5a:07:7a:be:66:33:42:
a9:99:eb:09:20:68:d5:c6:e6:17:47:b1:67:d4:17:
d6:4b:ac:b7:ea:53:b3:72:11:82:dd:15:92:48:54:
7d:40:db:23:a4:fa:f3:02:ae:5c:4c:50:09:91:32:
9c:77:a9:f8:82:5c:ef:59:9b:c0:9d:52:23:81:8a:
02:91:27:0e:5f:0e:e4:b5:17:20:69:ff:8b:95:18:
b4:35:4f:31:d4:b4:d9:b6:4e:71:63:c1:d7:e2:bc:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:5B:E2:41:12:B6:44:B2:E2:74:DB:73:F4:19:44:3D:50:54:81
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2f:45:3e:d3:76:b5:83:6c:e1:7e:22:1a:66:68:2c:49:ed:
3e:7b:3c:4c:03:dc:7f:2e:7c:87:e0:b5:e4:26:6d:9c:98:1b:
33:3e:e9:2b:2c:34:f4:77:aa:4e:61:0f:0c:4d:45:9c:28:d7:
46:0d:24:e9:3b:30:d1:7d:e5:4c:e4:30:72:53:78:1b:17:ff:
99:03:1e:f2:a1:f5:68:ed:50:39:97:16:0a:70:a4:69:79:f3:
44:d5:d0:83:ca:c6:31:46:6a:a6:4b:0c:b8:a4:1d:72:61:72:
9a:1c:e3:c9:21:a6:c0:3f:63:79:57:28:4b:6f:33:69:1f:32:
43:2f:dd:17:86:f1:3e:61:77:68:24:d7:c6:93:a3:f5:1f:20:
36:62:64:be:7b:1b:98:65:21:a6:e4:c5:fa:39:a5:a4:67:79:
f6:e4:62:18:8c:3c:3b:b2:e3:6f:8a:f6:d2:91:64:16:db:36:
76:17:0e:b3:e0:9d:5b:47:cd:a3:e0:20:b1:a5:0b:53:5d:f1:
d4:8e:63:15:a6:63:d6:8e:45:eb:3d:f2:e7:42:76:29:e4:a2:
ce:ed:2b:83:2e:d0:d9:6c:09:45:61:17:46:06:e3:7f:70:ea:
1e:f4:cc:60:cd:17:6f:3d:eb:5b:3d:6e:57:43:03:35:d6:1c:
0c:84:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:46 2025 by rpki-client