Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: bCtSHrUFEUaoZu4mH8Tn/FSciUQoetxkHQjBnZjpzRo=
Subject key identifier: 51:52:8C:C1:B4:6A:B6:5C:B0:47:0A:AC:53:52:41:E1:66:3D:39:35
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 0199FC21BDEA7D76077CA5CE7C457D750963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1172
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: tGVAd2cAdrC2VwpuQrq+VUyE5xTAaVaJFQ/QSNzlPnY=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bd:ea:7d:76:07:7c:a5:ce:7c:45:7d:75:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=51528cc1b46ab65cb0470aac535241e1663d3935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:9e:85:41:2b:34:ae:88:22:83:30:8a:ae:
fd:cd:fe:fa:f4:1b:17:c2:ab:9f:25:ed:1f:3c:1b:
0a:e0:02:fa:6a:87:31:d5:fa:e3:3d:af:1c:25:c7:
4d:ee:82:20:dd:85:65:9b:17:82:d3:25:d9:c1:d9:
9b:27:5e:0c:99:ca:cc:c7:4c:de:07:e2:5a:35:f0:
f9:44:18:ac:b0:8d:a1:34:67:ca:6d:7e:dc:75:1c:
ab:cc:76:fe:e9:5f:56:92:54:a8:ee:ba:d9:8b:39:
8f:62:92:80:c8:87:b9:33:30:5e:5a:49:f5:6d:76:
c1:08:20:09:e5:e7:5e:c2:5a:a6:bc:03:b5:e8:9a:
b3:0f:77:dc:0b:d5:ea:09:3f:e3:b7:6b:c8:87:70:
33:38:a0:17:53:d0:a1:1c:a8:0c:c3:9a:9c:01:ee:
ce:13:be:7a:44:44:fc:d3:63:a0:d6:bb:a3:04:be:
67:cb:51:bc:5d:5e:16:c1:cd:e7:95:08:1b:cb:43:
81:e1:12:f9:42:5f:b1:72:4f:11:07:6f:48:24:e0:
22:87:34:c1:55:d8:86:ae:a9:81:79:3a:81:47:4b:
2f:ad:f2:ff:22:6c:7b:7c:7c:b4:6f:ff:b5:fe:ae:
35:79:d7:c8:5e:17:fd:d1:b2:d1:a5:ee:76:fc:c2:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:52:8C:C1:B4:6A:B6:5C:B0:47:0A:AC:53:52:41:E1:66:3D:39:35
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ad:2b:1c:75:cb:6c:72:6a:96:e4:e0:93:0d:3f:7f:a4:5f:
56:3c:9b:a4:bc:74:e1:fd:3a:22:34:8e:c7:30:c1:99:d2:2e:
85:46:14:b1:37:88:89:9a:20:5a:83:0c:d4:6c:f9:2f:12:79:
d2:f2:1c:d9:fe:fd:77:bb:1f:a4:07:13:da:9f:d1:c2:cc:7d:
5f:92:94:4c:1b:85:41:7b:20:c9:f9:90:71:5a:78:41:10:cb:
a1:d2:4d:81:b2:99:dd:f0:04:59:83:e3:37:d3:40:75:03:c0:
89:bb:2c:fa:d6:1c:64:6e:37:70:4e:b3:e8:b8:c7:c0:c1:ac:
75:82:43:ff:b6:78:79:57:c7:66:33:8f:36:46:a5:7b:d1:5e:
49:cc:bb:1e:5e:82:75:69:d4:86:24:9b:82:51:eb:8c:9e:df:
93:6c:23:19:3b:0a:3f:a6:91:e3:ee:9a:53:1c:30:48:5b:b7:
57:8e:76:15:db:77:2c:c9:5c:10:26:08:06:56:67:91:e2:b9:
7b:9b:a2:cc:e3:5a:2b:cc:ba:c3:d3:0c:cb:c5:dc:e8:fe:25:
e0:c7:3c:a6:a4:95:e5:a6:1c:9d:bd:39:53:02:a1:86:d8:d6:
1e:42:ed:5a:b0:9b:5f:c9:a8:7b:aa:58:75:6d:a8:80:d3:d9:
15:54:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:30 2025 by rpki-client