Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: B3hWOmsjndLUjg34duRA0PnXYH3sLzfDIHRqcQPqVAo=
Subject key identifier: FE:30:37:D8:1B:C7:B2:2D:81:F5:5B:53:3A:81:84:B3:37:53:16:28
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 0199FFC8C2E951C58DBAD7E6DE476895210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 04:02:51 +0000
Manifest this update: Mon 20 Oct 2025 04:02:51 +0000
Manifest next update: Tue 21 Oct 2025 04:02:51 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: x3tXMAyfl109JjQVxZPlJoglL/D711sCOg+WIRvDXMg=)
2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c2:e9:51:c5:8d:ba:d7:e6:de:47:68:95:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Oct 20 04:02:51 2025 GMT
Not After : Oct 21 04:02:51 2025 GMT
Subject: CN=fe3037d81bc7b22d81f55b533a8184b337531628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:93:f9:9d:ed:4f:9e:72:06:27:11:9f:f8:
b2:a5:e5:ea:9a:d2:45:f1:46:f2:a2:cd:a6:51:89:
87:41:a2:e0:d4:71:d3:54:dc:47:55:31:28:2b:64:
86:bb:60:b4:64:24:85:64:be:ea:b7:d0:5d:c3:c3:
8e:30:0d:48:fc:3e:3a:19:47:bc:74:87:78:a0:31:
d5:9c:95:9d:45:60:27:e9:31:c1:d4:c2:4c:c7:e5:
96:30:01:51:1e:7e:75:4e:c9:f3:c3:b5:b5:c8:75:
db:08:c1:54:0e:ca:fb:50:98:ab:c8:a1:da:7b:f2:
80:40:59:e3:21:f1:96:12:13:d4:93:f7:08:ed:82:
a1:e8:65:d5:78:60:73:98:7a:b1:9f:33:48:33:79:
8e:dc:43:04:87:f6:43:ff:a8:d0:ca:42:ce:96:20:
5f:99:cf:2d:00:be:30:7b:8a:84:59:1f:21:a3:f8:
bc:6d:a5:b5:03:e2:b9:f4:a1:6b:96:02:ff:f4:93:
28:79:c2:9c:35:d7:44:cc:a8:81:4e:27:d7:c2:20:
30:b7:93:44:89:ba:b0:95:12:9c:6b:e5:43:c3:71:
68:a9:89:f3:49:c8:4f:08:2e:fc:84:51:ef:c7:e2:
d2:ef:93:c0:00:d7:b8:53:9a:04:50:fc:4f:94:db:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:30:37:D8:1B:C7:B2:2D:81:F5:5B:53:3A:81:84:B3:37:53:16:28
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:b8:23:f5:53:0f:b7:80:1c:f9:29:6a:b3:af:e2:0c:6d:
cd:0b:2f:d0:0c:f0:f9:ff:83:55:d8:00:de:cb:e9:9d:a6:98:
05:da:c5:a9:46:41:cd:e9:8c:2e:7c:f5:09:77:c4:5a:4e:42:
3d:7b:ce:5e:b8:c1:4d:ae:18:7c:f0:ac:4e:37:09:9e:0e:c1:
e9:ab:00:e1:5c:16:67:5d:7e:77:af:a7:9b:86:3d:45:45:f9:
9c:f7:56:52:81:64:2c:eb:f5:28:5c:ff:8a:0b:3c:33:5e:ce:
ed:db:94:66:73:d7:fe:72:97:f4:8d:c6:83:b5:32:a1:75:0a:
21:89:d9:16:41:db:72:12:34:e5:bd:b6:8a:57:42:95:cd:47:
9f:0e:de:f5:ca:c4:16:be:27:af:33:47:e9:3d:45:b6:9a:55:
b5:dd:e0:42:17:48:8c:9b:af:be:11:90:ee:e6:46:8d:66:bd:
4b:75:e4:59:bc:a8:d7:30:b4:be:37:9f:8f:71:31:5f:04:e7:
c2:17:67:21:3d:c3:bd:9f:85:a0:2e:02:54:e3:a1:69:ee:10:
bc:63:26:a0:7e:d3:0b:8e:a1:a4:e3:28:c1:48:6f:a5:16:fa:
bf:f5:e5:b7:21:38:a3:16:41:93:06:a1:75:97:32:4a:8c:7a:
2a:67:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:12 2025 by rpki-client