Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: AIc3Z/tx+sRVRY69u1ChMG76FVFZEIC4c5LEF1qZgYY=
Subject key identifier: 62:20:E0:48:A8:88:87:1D:B7:94:78:E7:93:F4:FB:F4:CA:95:58:44
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 0199FF599633E717F117431E7302E4E19C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 123F
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: 505QcayJo-pBwK1VqJNaBX1Q-5M.roa (hash: fIMbj/fl7aaDNKfopMcxB8cXpCnGq59ztvvwuTU/2xA=)
2: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: NugHqTZ7qaAWTOjlbviKfURyjh7ozPzsAnBnGcIRHqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:96:33:e7:17:f1:17:43:1e:73:02:e4:e1:9c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=6220e048a888871db79478e793f4fbf4ca955844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:69:1e:2a:3a:a6:f8:6b:98:eb:4f:e5:ac:
6a:93:5b:55:73:84:5d:4a:78:32:7f:bc:f5:d5:ad:
7a:f4:b3:00:12:58:ac:b3:b4:58:84:50:c7:dc:f1:
9a:82:a7:70:b6:26:66:cd:f4:9c:51:8c:35:89:e8:
a2:bc:b0:e2:c8:ca:05:f4:27:06:b7:e7:83:12:79:
68:74:89:f8:25:aa:9d:34:c9:1a:2f:56:eb:2f:c3:
e8:54:1c:04:88:25:85:bf:be:a3:e6:76:32:b3:05:
05:ca:91:16:ed:31:9b:32:c8:e5:45:1a:e6:eb:b1:
f4:7f:05:2a:49:fb:41:77:a4:64:dc:1e:0a:ad:c5:
c1:03:a3:47:9a:c6:a4:c3:97:3e:74:04:06:44:2e:
6a:30:56:0a:cc:d9:9d:58:2a:12:5b:96:61:19:b5:
16:b0:26:82:ab:24:78:d3:50:7f:7c:3e:2f:45:e9:
f7:57:1c:15:8e:cd:97:99:3b:25:7d:99:3f:d3:63:
b5:8e:d2:79:df:df:0d:25:58:58:5e:65:f8:66:8b:
df:e8:93:c5:3e:f3:e0:90:4c:36:38:38:94:e4:12:
f9:5d:f7:6a:1a:92:e5:41:c0:79:a6:26:74:24:47:
71:30:a1:10:37:da:c3:2a:25:65:6e:d9:f6:97:89:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:E0:48:A8:88:87:1D:B7:94:78:E7:93:F4:FB:F4:CA:95:58:44
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1b:21:14:9a:79:a5:ba:be:d9:5b:3f:fd:7f:f2:69:b1:22:
64:a2:5a:84:da:4f:bd:dd:5e:25:08:36:1f:d0:9f:d0:5a:bc:
bd:65:61:95:51:34:77:ad:cb:f2:aa:40:47:f9:06:3f:a0:2a:
6b:f2:9e:71:e8:ee:f7:82:d9:ae:f4:ec:9b:e0:b1:5d:74:3e:
15:e3:a4:21:de:87:89:40:af:d0:a8:6e:91:a0:f1:70:e8:1e:
30:8f:cc:00:93:ac:b0:91:42:d2:9a:19:69:f3:31:71:fb:74:
16:07:60:03:6f:91:12:13:55:f9:b2:b0:d7:19:98:8f:2c:46:
be:18:88:c0:af:68:d5:60:0d:80:2c:06:bf:40:47:78:28:f1:
66:67:14:2f:77:a2:0e:8d:de:fd:29:ce:9d:2e:a0:ea:79:60:
87:96:31:00:01:69:dc:0f:58:6e:c6:79:8f:5b:a7:81:ae:e2:
62:51:b3:8b:67:31:91:ae:26:8a:2b:03:23:a8:36:7f:a9:e8:
e5:ad:b5:f9:18:c4:d5:33:99:37:c5:9d:f8:82:ae:61:ac:fb:
29:44:dc:b6:27:cb:33:e6:61:d2:ea:e9:cf:e3:39:f3:4e:f9:
82:71:9a:bc:99:ea:44:37:16:91:96:bd:18:98:74:b1:b3:76:
8c:52:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:44 2025 by rpki-client