Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: 4WL9Qmzj0d1I0IVEFdD9PF5GWKNq0MZ9pX0OLdonacE=
Subject key identifier: 2D:38:3B:CC:DD:68:D1:BB:EE:E8:B3:44:4B:55:0C:2C:23:B1:A8:29
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 0199FC2155FE1AD167B184FF6002695D5227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0F01
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: fhGMabeIcoObbsgKWLRF/Op0SxaZgWRgVWnjxOdKd1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:55:fe:1a:d1:67:b1:84:ff:60:02:69:5d:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=2d383bccdd68d1bbeee8b3444b550c2c23b1a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:52:17:60:cc:7c:d7:70:df:b9:df:b5:ae:
42:9c:2e:4f:59:e5:1e:c7:09:e1:08:21:18:70:f6:
6e:ab:ec:8f:f1:86:12:58:3a:27:0a:78:01:88:71:
f5:da:58:c3:34:66:25:7a:62:19:00:b8:48:45:77:
e5:0d:c8:c8:85:4f:d5:7d:1b:8b:b0:64:a1:c1:f6:
56:aa:2a:93:2d:60:27:8d:e5:b9:2c:82:f4:5b:0c:
84:d8:42:61:26:e4:32:80:e0:38:d9:5b:cd:41:97:
76:ca:1a:30:e5:85:cd:a2:f5:db:c3:49:43:c7:9a:
a6:a5:30:a2:c0:30:e9:51:80:6b:47:47:d6:31:88:
e1:3a:cf:01:ee:14:46:a7:59:e7:ba:f0:3c:a8:18:
39:2c:d7:6b:69:df:fa:d5:db:8b:7d:ae:f6:c8:b2:
9f:bf:58:0d:09:da:46:ee:e3:e3:e6:31:56:f2:85:
bd:ed:d6:48:9f:46:d5:dd:06:1e:bb:7a:4f:de:d7:
db:1d:a9:dd:30:a8:9a:51:54:39:cf:62:e5:e2:e3:
78:bd:9e:3c:aa:7a:ef:53:a0:b7:69:57:83:61:77:
5f:56:0a:44:e4:00:8f:f2:e5:d0:8e:d1:03:84:78:
b1:69:57:66:a1:2e:d8:42:74:22:55:b6:6f:b1:a3:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:3B:CC:DD:68:D1:BB:EE:E8:B3:44:4B:55:0C:2C:23:B1:A8:29
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:57:23:23:bc:8c:cb:d4:8d:e3:89:e2:86:dc:e7:a4:ac:75:
2c:df:3a:11:de:09:18:d1:62:99:52:9d:a5:a5:e8:f1:ec:67:
10:78:ba:85:98:2c:2a:d9:93:40:a6:04:ee:5c:bf:43:08:81:
e2:35:7e:b8:db:0b:af:c2:bf:21:e2:f6:d7:4e:95:bd:b7:26:
b8:d3:f9:79:d4:70:ca:a8:1d:7e:1a:ce:2e:52:25:4a:7c:46:
d4:29:9e:41:1f:79:ef:8a:1f:b2:ab:ae:48:a9:cb:31:5c:38:
7a:bc:c0:76:98:80:a6:e3:a0:cb:3a:ca:54:66:79:08:f9:aa:
27:d6:bf:bd:81:25:a2:6d:29:7f:9d:90:22:f0:78:78:4f:50:
1d:c2:29:8b:8c:95:f1:fc:cf:07:39:ab:03:08:7c:ec:6f:7e:
65:ce:20:17:35:eb:a2:9f:bf:29:53:9e:56:fc:79:60:e7:78:
6a:bd:f4:81:d9:7d:90:cc:7d:25:62:3d:4e:7a:2b:fd:78:ad:
fb:b2:76:c2:71:5c:c1:83:36:8e:c4:26:f5:8a:b2:a8:a6:bf:
54:89:df:f1:7c:36:92:23:af:75:82:97:33:59:f0:7d:9b:79:
26:5a:f7:91:9e:50:08:12:9e:a6:14:8e:7e:02:7c:16:22:f6:
50:09:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:24 2025 by rpki-client