Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json)
Hash identifier: Cu7h7jz7Z6NsVzFSAK2KlxjUSjeHMBBcp24xHmGohQU=
Subject key identifier: E2:E5:90:05:C4:13:07:09:EC:C0:E4:3B:63:E2:B0:1E:DB:4A:14:04
Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Certificate serial: 0199FB7CF6533B5506248A7BB5EA5DBF0BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: gC4hX1H650tPWWp0H3xtyH3HS5hJcEjlFSsS/qulHJI=)
2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f6:53:3b:55:06:24:8a:7b:b5:ea:5d:bf:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=e2e59005c4130709ecc0e43b63e2b01edb4a1404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:73:3f:60:63:dd:b6:85:87:0a:6a:d3:32:
b3:0b:87:da:c6:b4:9c:33:be:5f:d0:69:bd:f8:ba:
a8:75:33:9e:a5:8d:52:01:f7:e4:62:e7:aa:26:8e:
99:90:8b:f6:16:76:20:7b:a1:72:5d:4b:c0:56:2f:
74:b0:a0:54:5c:d8:ad:ee:f1:4f:a0:1a:f0:6e:76:
1e:5b:52:68:58:05:87:bf:56:8f:d3:72:51:b4:18:
5a:98:2d:0d:6e:44:00:0e:c5:96:86:aa:a6:24:00:
30:cf:f9:05:60:db:db:0e:d6:52:99:86:ee:a3:e0:
a4:d4:1e:26:54:f8:06:5e:75:bd:51:e7:fe:10:9e:
5d:84:0f:c0:5e:64:f6:8b:d8:99:b6:bc:09:c8:4c:
fc:00:b2:75:8c:50:c9:0b:87:23:b1:6a:a5:b5:e4:
72:05:61:a9:68:d3:95:f4:26:a2:c1:c9:e0:fa:b6:
45:a2:31:7f:25:f2:aa:35:19:28:2c:a8:39:41:fd:
74:4b:e4:d4:aa:cf:cc:dd:cf:48:23:a6:e5:df:38:
d0:ec:ae:ab:60:36:8c:80:0a:fe:08:63:2f:8e:9e:
b8:59:87:ba:a3:8a:d2:bd:a5:3d:33:f0:bd:e6:be:
2e:b5:66:0b:99:86:0a:88:12:68:88:6e:38:9b:35:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:90:05:C4:13:07:09:EC:C0:E4:3B:63:E2:B0:1E:DB:4A:14:04
X509v3 Authority Key Identifier:
keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:08:1c:c2:b5:d0:7d:7e:75:78:99:58:b4:4d:db:08:57:
33:cc:05:1c:4c:66:d1:06:01:8c:37:87:d3:f2:04:3c:ef:ad:
a2:9d:a5:ca:f7:e1:e5:2b:2c:c0:17:48:f8:66:65:4f:92:90:
63:e2:f9:71:d6:84:38:26:ca:4d:a3:92:06:f8:05:e4:6f:5f:
9a:dd:5c:12:01:dc:ff:7e:8a:2c:a9:f6:bf:d0:6d:a1:1f:f9:
a1:7c:82:33:22:e3:bb:83:8e:62:f3:08:7a:a4:ca:fa:f9:fe:
01:fc:81:f9:f4:02:24:08:22:ec:a0:96:2e:44:e0:1b:31:ae:
f8:a4:ac:85:58:d1:88:1b:d8:24:87:41:c6:82:a8:7e:b5:9d:
8b:8b:2e:00:b4:20:1c:3e:c3:00:9f:66:30:c8:d1:39:32:54:
67:b8:5d:93:8e:6a:eb:53:dc:46:c3:04:ef:34:23:90:97:dc:
fa:89:14:df:9f:6a:a3:07:d5:2c:f8:a6:f9:53:59:58:4c:b6:
c4:e0:d2:49:92:52:48:73:cb:d1:ba:3c:1e:7a:09:a2:64:0a:
70:a5:7b:5c:0f:b2:c0:3c:c3:e4:87:e2:01:9c:a4:1c:9b:0a:
dc:af:03:5f:7f:3c:35:38:92:87:69:9b:9b:97:ac:97:a0:5c:
67:a3:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:00 2025 by rpki-client