Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: v6LnkvteuDo7RGrs0wIbLAckepPojZ5VfT4g0v9qu6k=
Subject key identifier: 5F:A5:10:32:6B:6D:4C:CB:BC:2F:65:C6:B8:0D:0C:89:D6:67:CB:20
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 0199FB0F4FB7C7D1093B653D57C01051B173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 146A
Signing time: Sun 19 Oct 2025 06:01:48 +0000
Manifest this update: Sun 19 Oct 2025 06:01:48 +0000
Manifest next update: Mon 20 Oct 2025 06:01:48 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: qqEP6/KdGZokS0aBKTMKnfydEQV/VEiovDLtXd+NUvM=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:4f:b7:c7:d1:09:3b:65:3d:57:c0:10:51:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Oct 19 06:01:48 2025 GMT
Not After : Oct 20 06:01:48 2025 GMT
Subject: CN=5fa510326b6d4ccbbc2f65c6b80d0c89d667cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:4c:9d:46:41:22:5a:f3:90:1f:ce:b4:d0:
97:86:db:be:7b:39:f5:09:21:3b:ef:25:5e:2a:b8:
40:cb:b2:bc:51:7f:ab:b8:70:88:8c:42:f8:22:03:
6f:9f:28:72:33:25:b7:02:30:ef:20:ba:c3:22:f7:
bf:d2:e9:66:0a:f4:1e:f1:63:b6:6d:e1:45:00:81:
ee:8c:41:6b:e2:a6:3f:dd:30:7e:0b:c2:34:31:4f:
f5:51:f2:41:bc:af:e0:3d:38:7d:0c:ce:a5:1e:5f:
75:ca:d9:b4:a3:ca:10:f3:38:d5:51:5c:a6:64:d2:
4e:d5:30:87:e1:41:54:9f:27:bd:99:a9:7d:0b:9d:
be:a7:ab:4a:a0:83:fd:f8:7a:29:68:b5:ed:fe:e6:
8b:54:45:48:8c:29:61:db:4e:a8:59:eb:63:58:55:
4f:10:67:02:15:f5:5f:44:ae:12:8e:6b:68:6d:62:
5f:f4:19:bb:3c:1e:5d:53:74:e0:61:1c:e6:16:f8:
30:fb:98:63:a0:22:c6:d0:a7:66:f3:e8:e5:9b:3e:
0c:29:32:c5:b2:45:28:dd:e5:14:af:a6:af:2d:91:
4e:8f:f5:79:47:8f:c7:89:de:1c:6b:66:04:aa:3c:
ef:b2:fe:11:8c:2c:5e:cd:c6:2d:eb:1a:67:4b:0f:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:10:32:6B:6D:4C:CB:BC:2F:65:C6:B8:0D:0C:89:D6:67:CB:20
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:5c:f7:b0:f9:0b:61:c1:7b:56:7a:ca:2c:e0:0e:f1:37:
40:00:33:1f:87:3d:66:f5:d7:36:b0:b5:33:92:82:8c:61:a9:
83:e8:3b:32:a5:6e:f7:83:3e:dc:b8:82:27:8f:2c:52:b3:47:
b1:c6:61:ca:18:eb:0c:5c:34:00:eb:34:8c:f8:8f:85:38:48:
f2:89:10:0c:c7:fe:f1:59:23:e5:e8:2f:bc:b1:ed:e9:0a:d8:
09:65:41:dd:c3:e4:ab:79:dd:be:e9:3c:bd:6f:f7:e4:fc:40:
2e:84:74:3b:61:43:9b:d1:5e:32:48:ec:07:5b:90:b8:17:db:
7b:c0:d1:0f:ba:6e:7c:54:62:04:df:a3:fb:e4:1d:f3:76:d5:
b3:78:e8:b8:2d:db:fd:e9:10:b8:d4:69:bb:7d:e3:19:ff:05:
59:3c:84:50:20:aa:34:0a:61:33:6e:31:ea:74:fb:8c:13:c4:
62:5f:ff:5a:46:8a:7a:41:3a:85:89:7f:89:31:29:41:90:10:
f7:f8:e6:c0:e9:f6:c7:2a:ae:ce:1a:fd:aa:df:93:a7:fb:fe:
fd:6c:a4:88:a3:6b:85:66:62:09:72:f2:70:bc:51:5f:d9:e6:
ed:07:f5:49:00:15:4b:23:ec:1f:34:ec:6e:29:a4:52:3c:ea:
4a:cf:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:07 2025 by rpki-client