Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
File: 5vwXvqVVttODIflAKOUV-6T6dNw.mft (raw, json)
Hash identifier: FGmSnOxTV8soMFPe5Tsof6O+BjnrLNhPUEgstNF67fg=
Subject key identifier: 5C:6B:02:06:24:C2:FD:57:B9:D3:45:37:65:8A:50:1F:00:58:C4:C6
Authority key identifier: E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
Certificate issuer: /CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Certificate serial: 0199FD33F371CE4779A04E28FA72A740102D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 5vwXvqVVttODIflAKOUV-6T6dNw.crl (hash: G0uim0y+ARlYqzPv0AZhOhlJfIKE8+5EvSnWoPv9xnM=)
2: J1qh-XLlSb83Cvw0tPyOs7lbFV8.roa (hash: UbADxFQd1kOQt6qZzcUh4NVaCiaCa54WExVcxjT3EEU=)
3: kLrHkvE4C0vYJ_I9mm47FT5Tbv0.roa (hash: wliDZ4/aTNMerRMfSzhrbSpYGq5mGBX1nX+LRd2XWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f3:71:ce:47:79:a0:4e:28:fa:72:a7:40:10:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6fc17bea555b6d38321f94028e515fba4fa74dc
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=5c6b020624c2fd57b9d34537658a501f0058c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:9a:3a:54:9c:70:88:4c:61:e0:2f:7e:85:
07:21:f0:ef:8a:99:0e:be:b6:16:9c:91:4c:7c:dd:
ca:33:7a:55:ec:32:1b:21:3b:c7:52:bd:fe:b9:28:
ae:d5:b2:ab:49:37:24:d4:5a:55:e3:e6:44:a9:f1:
f8:b3:eb:ca:d4:19:16:bf:d6:70:7f:2d:1e:39:e3:
21:0a:7a:a2:d8:02:f3:81:ed:e9:5b:de:ed:4d:32:
20:c9:5b:bd:ce:e0:c9:e3:8e:99:be:e4:0e:d1:19:
bb:08:72:14:9b:95:3a:b5:92:76:27:b2:74:d5:a6:
67:0e:cc:12:94:5f:fc:31:43:9d:ff:80:c8:0e:0b:
e1:52:2d:79:68:e2:c5:5a:b6:83:51:57:84:7c:3a:
af:d3:e0:9d:01:62:02:30:b1:58:88:72:94:c2:d7:
bc:7f:af:38:51:ff:03:94:8c:39:ae:b4:15:b2:93:
d2:37:ea:99:37:61:2d:15:88:63:d7:fb:43:a8:27:
f5:8f:44:bb:47:92:76:b4:af:dd:22:e8:37:c0:4f:
56:4c:2c:8d:98:f6:0a:17:a0:66:2b:35:cc:f3:cf:
84:dd:36:1f:22:06:f2:84:d9:cb:47:22:14:22:15:
9d:88:1e:a0:9e:e4:64:49:fa:77:43:79:a3:39:5c:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:02:06:24:C2:FD:57:B9:D3:45:37:65:8A:50:1F:00:58:C4:C6
X509v3 Authority Key Identifier:
keyid:E6:FC:17:BE:A5:55:B6:D3:83:21:F9:40:28:E5:15:FB:A4:FA:74:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vwXvqVVttODIflAKOUV-6T6dNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c0d463-a174-4f5d-b4ee-96967fcd42e9/1/5vwXvqVVttODIflAKOUV-6T6dNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:94:94:90:23:52:71:80:36:44:0a:db:98:6b:b3:77:10:
af:65:29:b3:dd:03:76:b7:1f:94:41:1f:99:71:ca:d9:1c:8d:
90:b6:df:c3:e3:9b:e5:11:cf:0c:b7:a2:80:bf:2a:9f:65:e6:
00:12:a4:d5:c4:2f:f3:16:e4:f9:c6:33:0e:6a:46:6a:96:09:
1b:7f:44:2e:87:82:7c:a2:cc:2d:d7:2f:90:d7:f1:f0:7e:76:
8c:24:85:16:98:ad:05:8b:0a:81:22:3e:3b:89:d7:a4:11:12:
fd:c7:48:3a:a5:58:e6:5d:ac:48:6c:6e:92:dc:1b:ef:d6:86:
b7:3b:42:a2:a9:ca:77:86:a4:2a:73:bd:5c:e5:84:65:f6:0a:
62:f8:ef:cd:54:b0:90:68:1b:6a:4e:b7:b6:67:85:6a:5d:5f:
ed:f4:52:8d:05:7a:88:45:be:97:91:80:f2:d1:a5:e2:ab:69:
c8:20:94:94:80:c1:4f:a6:c0:36:f1:0c:ab:35:28:44:dd:b9:
47:2a:3c:e4:d3:27:b2:93:9b:b7:76:67:1d:89:10:15:83:1b:
c8:36:d0:e7:c8:79:8e:e6:ce:93:20:73:d0:ce:00:4d:d2:cf:
a3:af:c5:08:2a:5d:e4:f5:51:3b:0e:d9:53:02:5f:60:36:6c:
2b:02:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:18 2025 by rpki-client