Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier: WTbatFs6SJYa6Iock8f5/WVwd+Gn4SVd4JIMqvaW7ik=
Subject key identifier: 35:75:B8:3A:06:D4:18:FF:2A:B7:DE:AE:36:F1:7C:3D:66:3C:DC:33
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 0199FEB4678ED711CE127FA4D57967010C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 23:00:59 +0000
Manifest this update: Sun 19 Oct 2025 23:00:59 +0000
Manifest next update: Mon 20 Oct 2025 23:00:59 +0000
Files and hashes: 1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: fHjuRbb6AE5rZmOLSFoQh4PO5iQHkxyvcCVzSwJmU2Q=)
2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:67:8e:d7:11:ce:12:7f:a4:d5:79:67:01:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Oct 19 23:00:59 2025 GMT
Not After : Oct 20 23:00:59 2025 GMT
Subject: CN=3575b83a06d418ff2ab7deae36f17c3d663cdc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:1f:2e:7a:c3:45:f7:30:80:70:68:c9:18:
ce:63:95:ee:0f:bf:8c:be:cb:01:24:5a:dc:c2:16:
4c:c4:e6:08:be:a7:87:52:a0:fc:d3:c9:75:e7:63:
8d:52:8a:3d:39:a0:3e:d6:d3:13:e0:c5:4c:5b:af:
ff:76:2d:b3:1b:1e:9a:8a:f7:62:0c:ee:1d:cd:55:
a3:79:ba:09:61:61:09:c9:f0:e5:9c:74:1e:fd:32:
2f:30:55:d7:9b:dc:75:ed:6a:78:51:50:81:ab:3d:
97:45:69:b7:0a:3e:ed:91:32:b3:e3:9f:2f:04:06:
f4:f0:5a:5f:9e:d7:36:c7:93:0b:0d:84:7a:54:0e:
7d:b6:fa:d5:1f:8a:21:d8:10:68:62:26:23:c3:50:
34:51:a3:17:56:4f:99:77:83:b0:be:0c:91:1b:ef:
eb:4d:bf:05:7c:ff:56:51:78:35:a3:f1:63:f1:bc:
17:90:74:93:e0:76:4b:73:a1:4a:fd:fe:49:e6:ab:
22:e1:5a:1a:1e:f1:a4:50:3c:34:60:ea:27:fd:45:
aa:51:8b:51:0a:2a:e3:85:18:b5:4c:9f:bf:5c:13:
01:03:4a:0f:41:26:72:57:d6:38:db:a2:ab:93:55:
44:d8:2a:d2:ab:79:38:4a:16:7a:0e:a5:d1:cd:60:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:B8:3A:06:D4:18:FF:2A:B7:DE:AE:36:F1:7C:3D:66:3C:DC:33
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9a:8b:50:56:5f:74:ee:f1:8b:8b:f6:3e:5d:b0:d6:cb:6a:
dd:4b:bd:2f:0a:30:81:75:aa:c2:ff:6f:30:a7:30:5f:af:82:
fc:7f:b5:ee:5c:d7:e8:75:37:0f:37:bf:28:60:22:fc:cb:54:
2b:8a:d4:c0:4f:02:66:a5:af:a3:a5:29:69:63:f6:71:fe:f5:
0f:46:63:9a:c3:36:61:04:06:8f:9d:26:9a:e9:d1:73:16:70:
d9:f8:ff:4c:c6:ce:5a:9f:aa:9d:75:95:89:11:cd:23:c6:4e:
cf:e0:b9:57:98:0e:8a:39:9a:8f:97:77:5e:56:40:aa:df:96:
ba:39:c5:13:b2:71:f9:08:8b:bb:e1:75:25:e1:0c:c1:52:b6:
25:73:a8:69:29:ae:3f:41:40:15:78:b5:21:8a:13:98:0e:82:
cd:74:a4:ee:ca:c0:d3:4d:f9:b0:67:01:79:6d:a3:94:36:8b:
82:d1:1c:35:c7:62:b4:65:82:cd:6d:3e:eb:1c:a7:6c:d1:b7:
68:62:e6:42:c9:e6:fc:ae:15:8e:0b:45:34:ce:a8:ed:ef:21:
10:5f:cf:bf:c5:1c:02:d5:73:b5:7b:36:f4:c8:a5:c1:dd:ae:
57:17:23:11:00:6a:19:26:4d:58:67:68:05:7a:ef:c5:a0:16:
e3:96:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:26 2025 by rpki-client