Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File: 5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier: RZNMfJkbsA/3jZfXvwhR0taV39fmTkdYg78uulRzwVo=
Subject key identifier: 07:90:82:06:71:22:AE:52:7C:8C:BB:19:19:A6:AF:E6:2A:04:3F:E5
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer: /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial: 0199FB7C9B01E70B9EECB3225A66821B5E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number: 04CA
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: oyQeQGVi0xnv+kRqrKOq8NMOmMnfIfGgrNOZZjY2FUg=)
2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9b:01:e7:0b:9e:ec:b3:22:5a:66:82:1b:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=079082067122ae527c8cbb1919a6afe62a043fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:d8:d4:58:9b:cf:63:28:a8:bb:71:f0:3d:
09:de:ef:13:a7:d7:b6:d9:ec:e6:0c:4b:1d:38:ab:
66:58:9d:3e:7d:f0:a2:a1:96:bb:36:6f:17:e5:06:
bd:8a:d3:c1:e6:78:d7:4c:fd:c2:7e:37:4a:7a:68:
cd:fd:29:0f:08:86:81:81:7f:f3:69:cc:be:4d:cf:
98:a7:42:8a:30:15:12:07:0b:d1:80:8b:4c:ee:25:
51:88:f3:1a:a9:b9:f5:09:87:94:01:77:0b:5c:c7:
d1:78:59:53:d8:e4:f4:e2:57:ff:e7:99:11:76:d2:
f7:6a:70:0a:1f:13:45:d1:a2:b7:5a:af:6a:ec:36:
f3:d7:bc:5a:50:dc:54:16:ad:4c:7d:e5:c3:3e:27:
d4:4b:7b:7e:bf:ac:14:0f:6c:39:5c:8c:3b:74:00:
cf:c6:42:d0:ac:24:00:ea:8e:f6:75:94:be:17:6b:
28:28:43:1f:d4:9d:d9:58:de:01:44:c7:d8:86:63:
01:b1:38:30:e5:44:a2:ff:0a:8c:1b:a8:38:33:51:
d8:70:c3:b4:5d:49:4f:ae:f2:95:2e:73:66:c3:6e:
6e:7c:a1:52:f2:52:73:5b:21:a7:aa:21:81:fc:a3:
97:6c:13:1d:cc:82:48:d6:fb:5e:f0:f9:a3:a7:46:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:82:06:71:22:AE:52:7C:8C:BB:19:19:A6:AF:E6:2A:04:3F:E5
X509v3 Authority Key Identifier:
keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e8:25:d9:58:1c:69:87:9c:f6:c4:20:45:59:5a:e0:83:cc:
69:2a:f8:7c:22:89:a9:7f:06:f1:9c:5a:a4:2a:a6:0e:c3:95:
90:be:bb:4e:72:b6:b9:ee:19:8b:29:5a:b0:68:17:aa:18:04:
76:c3:ba:63:4d:d0:b7:c2:fb:ae:ca:5d:e0:ae:30:ad:20:3c:
5f:a3:6d:24:ff:c7:6d:56:f3:c9:ef:47:25:14:7b:ac:5f:ba:
f7:1f:6e:0b:0b:d3:f2:0c:61:5d:21:29:e5:9b:83:7d:d3:16:
15:1e:7e:23:f5:f9:dd:49:8b:0f:85:b1:02:a8:d6:bf:5b:a6:
ae:ec:bd:56:85:e0:cf:b5:99:fa:78:43:6f:9d:8f:ff:9a:11:
8f:b6:3e:3e:b2:18:56:f5:06:c2:f0:d0:bc:35:be:70:e6:5c:
c0:cb:f0:f9:e0:cf:59:f2:8d:e3:a2:e6:5b:66:2a:62:31:c1:
42:21:8e:a6:0f:0c:07:6f:40:e2:c8:70:af:a2:7f:97:10:e6:
5c:c6:ad:09:25:0e:7d:ba:95:45:a7:ef:f2:ec:1e:36:b4:8a:
f6:76:00:df:96:95:3a:0b:39:41:e8:ef:ae:ba:7d:91:87:61:
e5:d9:bd:a5:3f:9b:a0:35:b6:3d:dd:d7:87:6b:74:bc:e4:6c:
99:44:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:54 2025 by rpki-client