Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
File: 5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json)
Hash identifier: iEorIrIZp6RILU/v6dguXJulSvK3nhbBzT7p9/r7odc=
Subject key identifier: 4B:9B:3A:A3:70:28:2D:6A:AD:08:DF:20:76:B3:9A:E0:1D:19:18:6D
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial: 0199FC8F77F3686589A1E60E1AB69482747F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
Manifest number: 0CB3
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: 1b3WlCjCAyYGgwzQZD3+//Nj8oOk6O04kKzr7VpYvRg=)
2: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (hash: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:77:f3:68:65:89:a1:e6:0e:1a:b6:94:82:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=4b9b3aa370282d6aad08df2076b39ae01d19186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:91:65:b5:05:97:bb:35:15:97:3e:65:ae:
20:c1:1d:e4:02:b0:f5:30:83:2e:33:71:b6:0c:98:
79:8c:fa:ce:81:6c:7f:a4:6d:2b:92:09:b1:80:7d:
c0:4b:8a:39:a5:83:4e:31:1f:9d:18:2a:01:fa:61:
71:8e:af:3b:1a:38:b7:38:04:4c:98:83:8b:f7:94:
98:58:d1:d2:a4:b3:cd:22:54:8a:eb:4f:58:ee:6f:
3b:36:a8:83:6b:f9:59:d8:17:af:2a:f7:20:ec:4a:
3b:be:96:71:fb:96:af:1e:bb:be:85:43:76:a9:27:
d6:3a:17:48:f8:1a:3e:9c:8a:18:aa:f6:6d:9b:88:
03:26:4d:93:d3:6a:42:8a:0f:11:8a:9e:e8:82:70:
cd:4d:69:f1:93:3e:c0:36:b2:4b:74:a9:06:b8:80:
7a:1a:bd:98:d7:e6:63:88:60:3c:13:75:39:dd:02:
38:c0:ac:b4:26:58:72:bd:03:85:e6:77:9e:7a:8c:
55:7d:88:fb:40:ab:a0:98:17:c8:43:91:71:95:29:
64:2f:45:b2:7a:a9:88:33:43:71:e2:af:4c:19:db:
0b:f2:e6:93:45:be:fc:ca:23:30:3f:be:f5:07:e9:
1d:75:39:04:ff:e2:a2:f3:17:c3:34:96:cd:ab:a7:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:3A:A3:70:28:2D:6A:AD:08:DF:20:76:B3:9A:E0:1D:19:18:6D
X509v3 Authority Key Identifier:
keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:07:3e:ed:9b:23:ad:de:a3:3b:99:f1:c4:26:3e:0f:e4:
61:8c:5a:3a:ae:4f:5b:b4:2e:99:77:ef:57:da:ff:ec:77:8e:
f2:48:8a:1b:f0:94:3d:ed:db:12:65:43:81:c9:a8:b9:83:83:
92:84:66:90:51:eb:2e:b2:4b:f4:1c:60:ce:65:02:f7:a4:bc:
69:32:3d:df:a7:40:19:2a:fe:99:e4:55:2b:19:53:63:36:98:
79:43:30:fb:e3:c8:79:9c:2a:d1:c4:85:23:b8:b2:4f:e4:c4:
37:ef:40:47:51:53:cb:05:39:8c:62:61:18:3e:9a:d8:1a:3c:
4f:76:33:b7:81:f7:bd:8d:61:c6:62:dd:c4:2c:b7:61:ac:9a:
a0:e1:51:7f:c4:75:59:9e:73:3c:88:b2:0e:6e:84:d4:2e:1c:
cf:79:5e:c4:a2:ac:bb:68:01:be:ed:04:34:80:24:c6:69:98:
23:ba:b0:05:13:44:a3:8c:ba:eb:d6:dc:1d:4e:5c:a9:1a:3f:
9f:cf:b6:cc:f1:d4:ac:24:ae:fc:19:a3:33:d5:96:53:f8:26:
ea:93:6d:88:b4:47:80:42:57:ca:a2:74:0c:e3:ba:7e:38:f0:
9d:9c:0d:15:25:16:36:51:a8:b6:e1:71:1f:b3:37:a7:f7:dd:
c8:7e:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:26 2025 by rpki-client