Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: 7DyrqhTYR2MWIhhCWW8mQvabVaGlyngEIOHo3wssPj4=
Subject key identifier: C4:81:5F:AE:83:89:D6:16:03:38:88:ED:3D:99:C2:73:82:36:8C:2F
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0199FBEA8C95BD17D4057B8E0B1557584A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: AaU9aeqDjHDQJI6zHJzdaq219Wc5JdNeZSEvLrl1AgY=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8c:95:bd:17:d4:05:7b:8e:0b:15:57:58:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=c4815fae8389d616033888ed3d99c27382368c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:8d:35:88:89:86:a5:e8:7a:1d:4a:8e:76:
31:71:04:91:b2:78:a6:d0:c3:10:56:99:a5:33:7a:
95:f0:4c:15:48:e1:86:28:cf:9a:1d:a4:1a:f8:f8:
a3:7a:b6:d7:b2:b5:de:57:6f:d5:9a:d0:22:0f:2c:
fc:5a:ce:83:6b:06:5e:57:b9:3a:56:7d:f7:e5:04:
b4:10:6f:f0:b5:11:e6:b6:dc:63:4a:92:91:19:46:
04:7d:48:fb:bc:ee:ba:2a:d2:4e:67:0f:2a:b4:9b:
49:08:bc:13:5f:63:a2:6a:80:88:93:36:17:b6:34:
b8:c3:eb:00:3c:b1:04:b7:49:26:91:4f:a2:20:56:
a9:b1:6c:04:a4:77:a0:c8:5d:f9:63:55:17:e6:0d:
d5:47:48:e2:09:fb:ea:d4:cb:b2:9d:72:69:4a:48:
ef:75:1c:69:ba:d5:6c:6d:40:c4:c1:ca:44:bc:bb:
b4:d7:29:74:6c:0f:a1:fd:73:df:71:57:b8:99:18:
bf:de:30:5a:be:56:41:d3:1d:ce:8c:3f:d1:e1:7f:
3c:a5:05:f6:cb:06:db:a6:55:b5:d3:6a:de:45:75:
46:cb:fc:92:cd:08:3d:24:09:f7:96:11:8b:f9:46:
3b:64:75:7e:1e:59:ad:4d:7a:f9:5d:92:58:c2:91:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:5F:AE:83:89:D6:16:03:38:88:ED:3D:99:C2:73:82:36:8C:2F
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2d:75:8e:08:a3:11:32:c7:ef:8b:1b:25:f3:c5:8f:bf:a6:
e5:a9:fa:e9:72:64:e7:4f:2f:ce:51:7a:e8:c0:5d:c6:ec:e4:
e7:91:4d:24:8d:16:45:9f:67:cd:84:c3:08:84:27:c5:99:8b:
2e:0c:2c:1b:af:e2:54:c2:2d:da:d8:0d:ff:c0:40:fc:3a:85:
00:03:d9:e4:94:17:91:cd:c9:da:f6:dc:b0:51:df:3f:61:44:
1d:29:4f:94:90:6c:2b:a1:63:af:b0:92:9b:cc:36:b4:45:c9:
74:5f:59:87:ba:39:b6:32:b0:75:55:9d:e4:d4:d4:9d:e7:3a:
2b:14:4a:ec:ef:dc:82:48:f7:d3:3b:3e:d1:59:88:9d:f9:85:
8c:79:32:7a:23:df:a7:c8:43:fd:a7:e9:d1:65:35:71:96:4c:
ab:a1:df:f6:04:29:c6:44:19:7e:be:49:aa:b2:a1:e6:19:5a:
7c:d4:53:29:5b:ad:52:c4:59:9e:b6:22:43:b3:1a:bd:95:6f:
11:89:08:3b:ed:c5:6f:fa:11:ce:55:31:f5:e7:88:60:35:f8:
12:c0:f0:e1:92:a0:78:bf:5d:3f:5a:66:3b:15:60:ab:22:15:
f2:45:96:67:ca:52:f3:ea:e7:51:68:36:6c:81:d6:4e:6b:6f:
2e:50:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:38 2025 by rpki-client