Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: k4eNdopWYpiwXohus1jFQKxg1oADeCHu8aNMfUpVdrk=
Subject key identifier: E1:31:DF:1F:50:FB:E8:53:D5:58:F2:F9:7D:40:AD:A6:BF:8E:54:4A
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 0199FCFD380CD0FEED11FF7A9DE3B6D702E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 09EC
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: 0tJlQf7CSwyiqpkF/UkMsNufXnkNCQCN+vv4rusxKnI=)
2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:38:0c:d0:fe:ed:11:ff:7a:9d:e3:b6:d7:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=e131df1f50fbe853d558f2f97d40ada6bf8e544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:7e:9a:c6:d4:21:0f:00:ce:4e:d8:2b:5d:
be:1b:06:58:ee:eb:44:5c:eb:33:3b:e2:c8:e1:96:
67:59:35:9b:91:e3:b6:61:58:7d:87:9e:d7:43:d0:
ce:9e:fa:0a:ce:1e:8d:f5:db:6b:3a:c4:4c:10:88:
4f:fc:88:49:3a:1a:5e:b0:70:98:84:c1:bb:48:fe:
16:5e:97:9d:9d:b9:3a:e7:14:b4:84:4b:23:92:b2:
90:cb:f6:69:f4:38:11:12:25:31:aa:5b:d6:89:ec:
e3:40:45:49:26:38:f4:9c:9d:f0:35:37:f7:df:33:
d3:0e:8d:59:b7:11:d1:00:e1:6d:15:a6:ae:dd:d8:
3d:72:a4:32:a3:91:86:f2:bd:11:8b:85:6d:26:ea:
58:63:b7:d5:45:b5:23:3c:85:4b:94:e7:44:61:ed:
12:3e:51:ec:b2:76:1f:81:df:8e:88:2b:2b:98:54:
b7:7c:e1:96:1b:9e:ec:a8:21:2b:15:0e:45:ff:9a:
db:22:0a:a4:72:6a:04:a3:f1:33:5f:91:55:cb:2b:
55:d6:5e:8b:94:a0:b6:e3:45:9a:16:64:7d:0d:66:
a3:fd:de:6c:a7:27:dd:9b:7e:93:09:6b:dc:c2:cb:
d5:df:8e:23:61:86:03:b5:6a:96:53:bf:43:cf:76:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:DF:1F:50:FB:E8:53:D5:58:F2:F9:7D:40:AD:A6:BF:8E:54:4A
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1a:ce:43:3c:90:fa:1b:9f:cc:78:9e:65:ca:dd:e6:6c:72:
96:5d:11:e7:a8:be:0a:82:78:8f:f6:67:23:ee:1e:e3:69:03:
7e:7c:94:46:a2:a1:bf:46:13:9b:34:a1:f4:a0:3a:0a:a4:6f:
88:26:e3:11:9b:44:b2:13:11:07:9c:1c:f9:89:07:34:32:46:
c0:9e:f6:21:e7:01:ac:35:bf:eb:21:f8:b0:4a:ee:29:64:da:
b5:a9:87:2f:27:89:6d:7e:17:93:3a:ae:7b:21:9e:4c:54:ae:
0e:1c:a9:89:a0:2d:b7:31:b5:b3:31:e9:f6:ab:12:e3:8b:c5:
97:e6:15:90:70:1c:34:98:5a:70:ac:16:0d:9e:1a:21:39:d8:
f9:df:04:16:0f:d6:9c:7b:a0:09:be:2e:b6:36:0c:72:27:d6:
66:1c:ee:24:26:2b:08:67:7d:50:c7:1c:c9:3f:d8:af:21:bf:
07:f5:9d:5d:48:db:47:c9:c9:5a:5e:e1:b1:08:d2:86:3f:64:
1f:c8:e3:84:03:6d:e2:86:dc:4a:cd:23:33:4d:a5:d4:d4:df:
7f:1c:dd:03:09:1c:7e:b9:d5:67:fa:82:e3:77:e7:3a:4a:0f:
79:8c:18:75:9a:c1:c5:04:2c:23:ab:6f:9a:58:be:0c:c8:ca:
89:ce:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:29 2025 by rpki-client