Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: w2he5/tiluq9we3ruoN34MvZEyLJ0xbni+OAxp16yvE=
Subject key identifier: 37:38:12:F7:1B:29:17:4C:4E:F7:A0:88:E9:A3:37:FC:6E:A8:23:16
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0199FC2199B5EFE4A72B434E5FE68BFCBB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0A22
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: Rk+SVzk38qgo0U58DVke2m+NBJFfmBsLfQ37RYw51ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:99:b5:ef:e4:a7:2b:43:4e:5f:e6:8b:fc:bb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=373812f71b29174c4ef7a088e9a337fc6ea82316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:ed:e3:18:87:05:c9:bf:d3:65:76:3c:c5:
4e:55:2c:db:bb:06:bb:15:bf:b3:5f:97:87:b7:67:
80:84:8e:26:8d:e2:7e:36:71:dc:f3:f1:31:43:52:
e9:2c:a7:e5:cb:29:23:dd:31:9f:ab:f8:52:df:83:
5b:1a:14:f8:7b:3a:fd:13:1c:04:ad:9b:c4:6b:01:
50:99:58:94:00:0c:24:34:c4:6c:26:90:34:c9:c1:
63:e2:75:55:99:03:20:70:9d:d2:b4:c4:4f:55:08:
aa:c3:34:2c:4f:0b:04:cd:c2:bb:ab:4c:df:d0:75:
61:31:48:72:eb:4a:42:40:3e:78:10:8c:ef:24:7b:
8f:1e:3e:bc:48:04:54:01:19:38:ac:64:06:5b:75:
3f:ce:fd:72:8e:f2:f0:c2:56:c5:8f:48:5d:ae:d7:
7e:e4:01:09:3e:2b:de:71:40:bf:09:91:fd:ee:5b:
4a:33:d8:cf:7f:86:d4:55:44:d8:d7:a5:92:bd:8b:
46:91:26:f6:af:8f:bd:ee:d1:71:23:a3:8f:81:43:
60:a9:bc:1b:39:ad:4d:3b:55:0d:84:08:00:52:6f:
e0:69:2d:91:c9:02:67:86:dc:16:e8:3b:49:25:70:
42:4c:08:cb:02:cf:d6:f2:e2:83:0c:96:3a:7f:9c:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:12:F7:1B:29:17:4C:4E:F7:A0:88:E9:A3:37:FC:6E:A8:23:16
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cb:6c:cc:da:c5:16:71:77:ce:e5:de:db:54:5b:ad:eb:4f:
ea:e4:38:44:12:78:ad:97:77:74:46:61:b0:3c:49:a3:0a:c5:
21:f3:55:7f:61:7f:a9:8a:46:0c:2b:44:23:7d:c6:22:85:90:
5f:1d:e1:ae:2b:35:16:54:72:de:59:c5:f8:8d:4d:f5:c0:69:
e6:02:ba:6f:db:f6:c1:65:ac:01:2e:df:1a:9d:7e:65:e8:51:
04:a5:13:e5:55:42:fa:cf:94:fb:9f:7f:ef:15:39:f8:b9:14:
5e:10:22:1e:e0:7c:fc:f0:f1:2b:fe:50:e9:31:f6:80:59:5b:
39:29:56:af:88:59:2f:3d:8c:cd:0d:58:c4:ee:6e:01:d1:66:
21:9d:ed:2c:32:88:3d:6a:0a:6d:9d:1f:df:6d:df:c4:39:1a:
c1:9e:5a:b6:c1:58:4b:54:47:22:19:c5:23:f7:f0:17:8e:e5:
a4:b7:a9:52:6e:c4:c5:33:99:0e:2d:f9:2f:4b:89:5b:85:bc:
cd:17:95:0d:a9:b0:9f:78:3b:17:f4:2b:d4:39:56:33:f1:a3:
5f:bd:86:b9:91:91:ba:10:61:59:e9:08:02:c4:ef:f9:8c:20:
79:13:6e:3c:bc:d3:b0:c5:17:20:9f:17:cf:04:fa:9f:96:57:
1d:6d:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:12 2025 by rpki-client