Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: Q22Azjcsy7uPNgd5L5bhJSDykeLlIAfTfNdoDHSMudc=
Subject key identifier: 8F:E1:FD:C6:07:FF:3A:0A:1E:1D:8E:16:50:30:A2:22:C0:53:62:C2
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 0199FE469D69E77DB0D2D4D9B592FCAD4C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 0489
Signing time: Sun 19 Oct 2025 21:01:04 +0000
Manifest this update: Sun 19 Oct 2025 21:01:04 +0000
Manifest next update: Mon 20 Oct 2025 21:01:04 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: BEcv1GYAi1yHiFMMOIToN89ExjT1J97Ns6fsODIlEKE=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:9d:69:e7:7d:b0:d2:d4:d9:b5:92:fc:ad:4c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Oct 19 21:01:04 2025 GMT
Not After : Oct 20 21:01:04 2025 GMT
Subject: CN=8fe1fdc607ff3a0a1e1d8e165030a222c05362c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:19:9d:e9:96:44:33:52:45:29:52:10:4b:
f0:1f:68:92:25:04:d0:1a:a1:53:8c:9b:61:7e:3b:
65:91:53:fb:bf:41:8c:35:ae:da:da:55:b3:44:bd:
40:71:5d:ee:76:13:6d:44:e6:e0:9f:67:5a:b0:ee:
40:da:a3:d9:9a:6e:be:2c:e1:27:67:10:8b:1c:bb:
54:56:38:a0:0a:68:75:b0:c4:69:83:ce:2e:e9:82:
98:7b:2d:47:6b:cf:45:fb:b2:f2:dd:ce:c1:b6:3b:
13:83:d3:ca:a8:27:da:35:8f:0b:28:8f:77:8d:85:
22:fa:6e:09:f4:99:c2:25:01:fb:98:b7:1f:d1:5d:
ff:28:24:ca:00:dc:d8:54:7a:4b:4d:13:26:9c:03:
8c:35:b5:ee:fa:a4:ef:5a:dc:b8:2a:82:a4:5b:81:
69:a6:46:e8:2b:49:33:cc:ee:2e:1c:43:94:e5:3d:
c0:c4:52:8d:3a:cc:08:90:c8:5b:3b:a6:e1:3e:f2:
a8:7d:39:1b:e7:41:57:2b:78:45:59:52:7f:94:60:
1c:06:2f:66:43:28:ba:3a:9d:bf:12:4f:59:f5:73:
b6:49:e2:7a:b3:9e:92:c6:43:1c:0d:34:03:06:e2:
c0:75:ad:f0:4c:1a:95:44:4b:a2:75:2a:25:fa:d2:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E1:FD:C6:07:FF:3A:0A:1E:1D:8E:16:50:30:A2:22:C0:53:62:C2
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:48:c5:e0:38:d1:42:ad:5b:1f:9d:4f:27:68:0b:7d:a0:
ee:43:72:cf:b1:7b:9f:aa:68:2e:17:fa:0b:b8:98:41:e5:10:
00:99:44:1a:1d:56:90:cf:68:40:19:1a:bc:be:a6:23:14:ef:
b6:49:2e:a6:38:28:f4:66:fc:4c:8e:f4:a3:fc:3b:24:e5:9f:
fa:49:fa:4b:fe:69:d1:d8:9d:64:52:15:7d:0c:36:e3:b0:7c:
1d:e0:b0:30:87:83:fc:77:44:d0:a5:f8:6c:48:4f:31:6a:42:
1a:1e:46:9e:f7:61:53:2b:a0:97:73:0f:ac:f3:c7:f6:70:33:
82:1a:80:f1:a9:32:45:73:ed:99:e1:32:38:56:41:ca:ee:28:
de:e1:7d:fd:3b:8c:3c:96:32:59:b6:ba:ca:1e:3c:6c:51:dc:
d8:d8:37:ab:f8:fe:d1:26:1d:76:1a:27:4f:3a:7b:3d:cc:89:
08:f5:f3:8c:aa:a0:e4:ff:de:b4:60:0a:9c:a2:96:83:8d:6b:
55:02:47:4a:ad:7b:be:46:ba:53:d6:43:7e:85:49:e1:c4:7c:
c3:b2:41:4c:33:08:38:10:95:5a:4f:9a:07:ce:16:01:f3:e3:
c8:a5:dd:fc:84:c6:20:c0:02:76:d1:f3:24:dc:47:3e:f9:8a:
57:d8:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:07 2025 by rpki-client