Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: NUO8y3MN1uH/0Ewt3jmW6WIehNh5W6gKMYm+NEoT3wQ=
Subject key identifier: DD:FF:CD:9F:87:84:42:31:9C:5C:F7:48:E2:96:D4:FA:41:8D:2F:34
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 0199FE473D831E4E6AF8C61561A26EDE0F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 0304
Signing time: Sun 19 Oct 2025 21:01:45 +0000
Manifest this update: Sun 19 Oct 2025 21:01:45 +0000
Manifest next update: Mon 20 Oct 2025 21:01:45 +0000
Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=)
2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: fcX7Zi8JyQx9bkScAusAyt5GRkMUaA4Y/Sy+yaZm4kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3d:83:1e:4e:6a:f8:c6:15:61:a2:6e:de:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Oct 19 21:01:45 2025 GMT
Not After : Oct 20 21:01:45 2025 GMT
Subject: CN=ddffcd9f878442319c5cf748e296d4fa418d2f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:d8:ae:7c:04:51:89:21:8c:b4:7d:63:d7:
e4:81:85:23:3a:97:8c:1f:58:51:8c:0c:4f:3d:85:
ce:d3:19:22:8f:80:6a:78:d9:e2:fa:87:2c:b3:09:
c2:22:b4:0e:2d:af:d9:6d:ff:2a:85:5a:de:4a:62:
4c:3a:9c:2c:fe:df:28:19:8f:0b:d4:d4:81:2a:4d:
88:e2:9e:f4:24:e9:a2:92:8e:e5:80:48:ca:3c:de:
c4:04:0c:74:f6:cc:6c:5d:d6:70:70:59:04:ce:ae:
51:08:c9:cb:4c:b8:14:4d:49:1b:92:26:51:c7:26:
5f:9d:29:ef:2e:c0:1e:c5:ed:b1:03:e1:59:e0:1a:
9f:8f:be:20:97:d1:d5:68:91:3a:14:69:19:76:c6:
31:e2:99:63:af:63:2c:cd:ca:5c:62:82:99:4a:1c:
64:7d:41:3f:06:36:fb:e9:60:cc:af:8e:8f:89:23:
b4:58:6f:66:94:23:d9:5b:e3:25:ef:58:8b:fc:1e:
08:ea:38:86:b6:88:e0:95:42:27:8d:b8:53:7b:c3:
14:34:00:1d:ad:de:66:d3:60:64:db:e6:b9:0a:38:
39:65:cb:0e:2d:59:d1:05:03:56:5f:ff:37:b7:b7:
2a:5f:11:90:a4:b8:3c:3b:ba:8a:80:92:b1:a5:d6:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:CD:9F:87:84:42:31:9C:5C:F7:48:E2:96:D4:FA:41:8D:2F:34
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1c:60:66:49:a3:e5:66:9b:b7:de:67:5f:59:f4:f0:47:93:
bb:97:07:5c:fc:e1:a7:cb:40:d0:8d:4b:7c:55:42:ba:2b:dc:
95:7f:ac:ec:b4:6c:f1:aa:c7:fa:9f:40:43:a6:a5:c8:38:5b:
f3:3e:07:27:68:f9:5e:9c:e2:69:7b:ff:86:ad:c8:45:7b:63:
cb:2e:f1:55:a9:d7:4d:5a:50:6b:e9:a5:b4:99:3c:d1:15:8b:
be:83:23:0d:2e:d1:bc:6b:3e:18:5f:61:5a:5d:f1:0f:d5:c4:
50:f7:71:a4:a2:cc:15:1f:b9:d0:0a:ee:a7:c7:a1:cd:ea:29:
e3:55:5e:12:5d:9e:e2:a2:94:b5:0f:c5:2f:9e:78:ff:02:25:
2a:10:99:22:dc:b1:95:df:65:b2:38:87:ba:52:0c:9f:70:f4:
7f:92:08:f9:24:97:37:2a:1d:97:46:f0:a4:78:a9:13:a9:59:
72:80:c3:6c:15:ea:58:fc:17:57:8e:b7:69:27:c0:64:0e:30:
25:4f:ea:9d:99:c4:6c:bb:47:9e:2c:96:df:1f:b5:a5:2d:d3:
97:18:cc:21:2a:99:c5:e6:b7:d5:b5:3a:52:0f:75:5f:38:8d:
6d:0f:9d:88:5a:dc:1f:9d:cc:87:6d:46:39:d7:a9:e9:14:26:
2b:f2:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:48 2025 by rpki-client