Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: Ej/sCPRJ82evWklinWi49zbv3Taz4Aysxo9c9mncunw=
Subject key identifier: 09:08:39:B4:C0:DD:89:31:EB:FB:43:FD:9A:EB:EF:F4:31:7E:7E:0C
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 0199FC215BE7EFA55E2A8E9FE1655C153C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: SUm9Qq+NvE3RvscWptNCDRNV4e7aBMnEYQvYUHseebg=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5b:e7:ef:a5:5e:2a:8e:9f:e1:65:5c:15:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=090839b4c0dd8931ebfb43fd9aebeff4317e7e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:d0:ac:95:59:3d:a1:f9:e7:e3:d1:9b:4c:
cc:83:b2:8b:b3:93:5c:2c:e6:d3:40:1e:f3:59:b8:
9a:f7:72:77:9c:5e:21:a7:10:5c:b9:4d:61:68:38:
92:9a:9d:c0:0f:2a:42:3d:57:cd:cc:f1:74:69:a0:
34:d6:17:f6:aa:d5:67:40:8f:c8:48:6d:09:bc:0b:
2f:75:7d:78:90:03:54:24:00:1a:29:83:89:0f:ed:
17:92:cf:52:66:09:f4:39:15:a9:92:bd:76:0a:35:
ff:8f:7e:2b:c5:5e:a2:05:d2:a3:9d:26:ff:40:7f:
66:ba:b3:a9:ea:1a:c9:de:a3:89:14:1c:20:18:44:
c5:fc:21:b0:65:09:fb:61:64:a2:14:52:ad:f9:28:
d1:1b:7d:4e:7a:d2:a8:ff:40:d0:ce:c3:22:3b:9c:
c0:a3:a8:d1:70:19:44:63:16:b6:e8:4c:45:e5:22:
73:e4:45:5e:09:fb:98:55:b7:53:87:6c:af:a8:c1:
8d:42:3d:94:36:24:29:9c:dd:0a:78:06:24:7a:ab:
55:96:70:d4:dc:2d:5d:e1:23:bd:9e:35:66:35:2e:
99:55:f8:5f:59:ee:93:f1:9e:9c:f8:5a:e7:59:24:
1b:70:7a:21:8c:c4:a4:47:86:1f:53:0a:c6:2b:bd:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:39:B4:C0:DD:89:31:EB:FB:43:FD:9A:EB:EF:F4:31:7E:7E:0C
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:e7:2f:99:e9:f7:2c:81:5f:2c:cd:73:17:aa:ea:80:bc:
cc:48:30:de:f4:6c:f1:87:6d:e1:3d:10:62:25:1c:14:2d:29:
a4:55:8f:80:8d:ac:6b:4e:0c:8a:f8:9a:4c:38:7e:df:15:bd:
69:84:12:a4:ee:3a:7f:ef:47:b2:af:87:58:4d:82:fc:e5:f5:
85:21:a1:b2:82:7f:ea:0a:56:b3:a5:93:fb:ee:37:4e:42:59:
5e:a8:02:49:3e:dc:95:f3:47:51:e6:82:55:c1:6c:4b:4a:9c:
26:8f:3e:77:55:64:a2:67:01:44:49:eb:75:47:f0:00:50:27:
44:a8:d6:e2:38:c1:c7:7a:af:33:32:7d:b9:44:2c:6c:70:99:
be:c3:41:40:69:bb:8c:cd:56:9b:84:4e:da:72:ae:37:e0:09:
b2:23:9e:85:94:26:0b:c6:c1:15:47:8f:bd:b0:f6:6a:e1:8e:
10:a9:43:96:e6:7a:ff:3a:ad:a5:4a:9c:ed:cc:24:51:81:ae:
fe:05:cf:38:82:2e:35:34:c3:30:27:95:de:bd:f5:8a:b8:b2:
75:ca:3d:e7:d0:ed:fc:6e:f9:a7:76:ab:0f:ce:71:27:d4:b2:
80:a3:91:84:77:16:d4:e5:74:12:11:e8:42:18:2c:ba:91:c0:
f4:07:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:40 2025 by rpki-client