Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: hAxLClSL1hiEuV2FD2FsLcsvktmffUSiXHIhoQfghHo=
Subject key identifier: 13:F0:EE:7D:C2:15:6C:0F:85:13:6E:EA:02:DD:C6:1F:02:1D:37:1D
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 0199FF59722275C033CA5E1E8B5437672DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 0A16
Signing time: Mon 20 Oct 2025 02:01:15 +0000
Manifest this update: Mon 20 Oct 2025 02:01:15 +0000
Manifest next update: Tue 21 Oct 2025 02:01:15 +0000
Files and hashes: 1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: FnNfDDSOkBYAhnBhR6sEwznDsQIC3fk6JUX5D7pg8QQ=)
2: BATki590UiqZDbP_z7AwLiqKNlQ.roa (hash: lLBGgs0m/c36BeWtUsvXAnd6y79SE8z2K+GJhbENw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:72:22:75:c0:33:ca:5e:1e:8b:54:37:67:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Oct 20 02:01:15 2025 GMT
Not After : Oct 21 02:01:15 2025 GMT
Subject: CN=13f0ee7dc2156c0f85136eea02ddc61f021d371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:6f:3a:84:6a:f8:39:53:8a:2e:d1:7a:76:
fa:a7:23:05:1d:d2:93:fd:6e:d8:a6:ae:b7:03:a2:
6d:d8:85:87:e4:85:26:c0:c3:a4:e3:3d:cc:7c:55:
4a:80:d9:88:d5:08:92:0a:06:4b:ac:a9:cf:38:7b:
e0:74:ce:f7:0a:23:21:9f:d8:bc:88:11:35:bb:cb:
cf:38:f8:00:bf:d9:0b:a3:22:ff:d3:e3:8e:b6:c9:
f4:bd:cd:7d:66:7a:23:c6:a5:fc:95:a5:ca:6f:18:
d9:1e:53:ae:a7:db:95:43:9f:1a:bc:80:d6:4b:f4:
45:39:81:9f:a3:4d:06:f3:3b:7c:c5:fd:3f:99:b7:
51:b6:32:c6:10:37:9a:04:4b:39:a8:04:50:e0:dd:
b8:89:a4:ab:33:88:a6:34:1b:68:b5:4a:a5:7a:d7:
c5:f5:9a:dd:79:e1:56:48:41:02:66:b7:1f:01:50:
dd:a5:e5:fc:cc:64:5e:82:1a:c1:3f:8b:35:8a:b9:
5c:44:a2:e9:d8:17:08:82:e9:96:fa:d8:45:44:0f:
1d:27:49:0e:8b:86:95:51:3b:d6:65:6d:48:2a:bc:
30:81:9f:43:e6:5d:0b:73:3f:f2:76:c7:29:07:56:
f9:6d:7e:ab:c4:27:a8:67:a5:a3:ed:82:3e:14:6c:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:EE:7D:C2:15:6C:0F:85:13:6E:EA:02:DD:C6:1F:02:1D:37:1D
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f2:6b:6c:af:df:d9:8b:a0:77:08:d7:9d:bb:9b:9c:8b:64:
fc:86:88:d9:dc:4b:66:32:11:c7:92:24:15:f2:86:87:c0:65:
0a:24:5d:16:94:ad:b2:10:0c:72:a4:7a:63:6a:ff:36:29:1b:
65:a3:5e:43:1f:58:b0:19:04:ee:1b:d5:2f:5d:1b:60:20:92:
86:ef:2c:e5:5b:d6:b3:49:5c:27:45:16:58:b4:bf:1d:1a:8c:
c2:f8:41:0f:b8:9f:cf:65:bc:52:d5:ef:75:a4:cf:6f:b0:4d:
73:0b:56:2c:20:e4:d7:13:d0:fb:b4:28:d3:52:4a:4a:87:c9:
ab:e6:2e:1d:38:87:24:c8:95:26:96:d0:69:6e:bd:f8:b4:36:
50:e9:e8:96:65:8d:16:dc:48:93:4d:aa:73:9b:b6:72:e0:39:
be:0a:b2:b8:78:a5:f4:25:9c:0c:93:95:bf:d2:a8:68:4d:ab:
32:56:85:c4:93:22:b4:2a:ef:0c:ff:94:8f:2b:1e:5a:c3:75:
1b:8b:cc:36:4e:aa:e3:01:b4:d7:e5:b1:80:c6:c4:8a:53:ff:
95:e6:a4:92:a3:7a:16:1f:20:0e:93:b4:0c:ea:bf:78:67:a3:
b3:13:eb:8d:9d:32:04:8b:7a:22:c2:a4:7d:c7:b0:c3:7b:9d:
8e:59:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:55 2025 by rpki-client