Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier: d64s/598z0cvkv1GI/Az8T4gFxwRkV7zQI2xFWMLJO4=
Subject key identifier: 52:E5:68:CF:91:19:2B:0B:C4:2A:8D:A9:13:B8:1A:69:06:70:B1:EF
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial: 019A00356443355715AA427FF78CAE2A3B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number: 1533
Signing time: Mon 20 Oct 2025 06:01:30 +0000
Manifest this update: Mon 20 Oct 2025 06:01:30 +0000
Manifest next update: Tue 21 Oct 2025 06:01:30 +0000
Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: rDUgE4fLTK2yqAegUwWrDMU1oNIFgC1JgWEnD0SCfYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:64:43:35:57:15:aa:42:7f:f7:8c:ae:2a:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Validity
Not Before: Oct 20 06:01:30 2025 GMT
Not After : Oct 21 06:01:30 2025 GMT
Subject: CN=52e568cf91192b0bc42a8da913b81a690670b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:de:5e:02:78:77:74:cc:a5:db:ba:ba:25:
be:76:8d:99:c5:f6:e0:59:7a:0a:d7:48:50:c2:7d:
79:5a:60:d7:24:be:c5:0e:03:58:91:83:47:8c:b4:
88:17:65:4a:46:39:b3:4f:bb:3b:c7:a4:99:11:23:
61:b8:06:07:98:a4:eb:88:04:ba:60:74:93:d3:25:
af:76:48:06:39:f5:e2:93:fa:c7:13:26:12:10:c6:
4a:00:d7:3e:e4:1a:3c:32:53:c6:26:9a:82:e0:fe:
93:52:bc:65:b0:ba:36:f5:04:bc:26:4f:c7:3b:b7:
c9:9c:80:2f:c2:0a:72:10:45:b6:f2:80:40:90:27:
66:50:5b:c5:00:39:63:dc:b6:19:cf:35:6d:ec:60:
5a:3a:b8:32:2e:e4:56:5d:fd:48:e0:fe:8c:05:36:
5b:95:65:cf:37:8d:fe:3a:b7:e5:bb:76:1d:a2:f5:
c5:b0:50:64:59:87:31:1f:46:8d:23:74:fd:0e:86:
97:d3:66:8b:64:25:27:13:46:10:55:27:b8:21:08:
63:b3:46:f5:24:f7:87:e5:1a:60:0e:6b:ec:a4:fe:
9c:e3:58:74:b4:2a:b6:ac:ec:61:5c:8d:83:84:d7:
6b:54:02:59:64:e9:69:2e:2a:28:db:26:70:6c:a4:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:68:CF:91:19:2B:0B:C4:2A:8D:A9:13:B8:1A:69:06:70:B1:EF
X509v3 Authority Key Identifier:
keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:45:08:10:dc:fb:f8:b2:a8:24:49:ff:2c:59:cc:6a:7e:c6:
8a:7b:1c:8f:58:f2:82:21:d7:25:dc:ad:8d:c4:db:d7:20:0d:
2b:76:c7:3b:a3:52:50:9b:6c:9c:b1:7a:ec:e5:aa:c1:be:e4:
1b:23:41:88:b0:b8:cf:1a:d5:59:99:8c:f4:90:b1:88:9f:b2:
6d:71:a4:8f:7e:bc:77:86:92:c7:22:38:b2:69:04:e2:ae:52:
bf:4c:dc:fe:87:7f:32:e1:9a:82:64:56:f9:a8:da:c7:c1:91:
20:22:cb:ee:4d:02:1b:6b:02:c2:ec:90:74:1d:21:7d:d7:9f:
0f:f0:2e:e5:68:a9:61:63:0d:b2:a9:aa:19:d9:e6:97:4d:30:
56:15:51:6e:ad:40:ba:59:e0:89:1e:b1:0c:3a:6f:70:b6:8f:
5a:0c:cf:43:ba:e3:12:58:bc:c4:f8:25:b0:94:9c:b3:84:c6:
03:09:80:95:37:43:09:89:f2:d9:c5:c0:95:23:93:73:e5:14:
ac:63:bf:c3:41:03:ff:9e:12:a6:4b:57:74:2f:93:fc:98:2f:
31:65:6f:46:92:8d:3c:6a:a9:4d:64:10:fe:5b:fe:af:4d:22:
40:d5:7d:07:85:45:35:10:e2:8c:aa:39:80:12:54:a5:2c:53:
d4:2a:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:33 2025 by rpki-client