Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: 7Eha6JSFEgkvjfyoYJvo4RaC/w5XdNcXdVCzgaCf6SA=
Subject key identifier: BE:8F:29:36:47:81:44:47:F7:7C:E0:50:30:D0:4B:52:18:79:10:CE
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 019A01B5C03EB0124E7506F522F18F00919A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 13:01:19 +0000
Manifest this update: Mon 20 Oct 2025 13:01:19 +0000
Manifest next update: Tue 21 Oct 2025 13:01:19 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: 8Qj5D6qKeVVI4Bx1fg1nGhP8Q2WxppQgdNeYKoroVuI=)
2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:c0:3e:b0:12:4e:75:06:f5:22:f1:8f:00:91:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Oct 20 13:01:19 2025 GMT
Not After : Oct 21 13:01:19 2025 GMT
Subject: CN=be8f293647814447f77ce05030d04b52187910ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:5c:55:7a:c5:da:25:d6:1e:62:df:5b:81:
27:ce:fb:7e:0c:92:2c:7e:2e:f8:18:ac:93:d5:f1:
b6:90:b1:ae:91:79:db:ac:ab:e5:2f:16:0c:54:61:
52:e1:8d:61:e3:17:1d:99:bc:c2:de:c5:07:ed:b1:
39:8b:6b:a5:34:45:47:2b:67:a4:04:ed:f7:8c:e1:
01:a1:5f:5a:13:a8:a9:27:ce:ad:0d:85:25:f2:eb:
4f:e8:95:27:40:6a:8c:66:a5:78:fa:ca:ae:93:1b:
fe:4c:40:5d:13:2b:4a:a8:dc:1c:39:c8:52:59:a2:
1d:57:b9:fe:d1:53:95:d0:e6:85:99:bc:76:5c:69:
81:e7:fa:b9:27:43:36:a8:2c:59:12:25:60:60:9b:
a6:05:6f:6f:9c:e1:e0:47:78:3e:56:19:8d:d2:0a:
d6:4b:c6:0b:87:10:f2:85:e0:fc:07:22:22:b6:6c:
a7:7a:5b:f0:de:5a:97:c2:67:dc:e5:a0:bd:2b:dd:
be:a3:94:6f:ee:2d:91:c1:6c:bb:22:2a:3a:e2:8a:
be:94:35:c3:58:cf:45:3f:9f:cc:8d:50:5a:85:22:
9a:95:b1:2e:31:47:29:f5:5a:7c:b6:a1:d4:c7:9a:
e6:22:ee:51:94:46:96:f4:12:99:32:1a:4e:4d:45:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:29:36:47:81:44:47:F7:7C:E0:50:30:D0:4B:52:18:79:10:CE
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:32:b7:d2:7f:cc:b7:0b:1e:2e:8d:03:92:e2:05:e3:ba:21:
f1:1a:08:41:6d:1f:26:c2:b8:05:d6:a3:02:0d:7d:7d:22:d6:
34:d1:44:bd:b4:aa:4c:83:7c:a8:03:60:70:d9:81:d0:6f:53:
a8:07:2c:b4:b4:b4:b5:e0:1d:03:fd:a3:70:6c:66:10:cd:b5:
68:b1:e6:a1:e9:1a:33:66:cd:e9:e5:b0:fc:a2:b2:2b:aa:ca:
2b:2e:ec:54:43:bd:aa:b3:3d:12:63:62:58:68:19:33:c9:2d:
6e:b3:23:fb:f2:e9:32:c2:bd:5c:67:fa:da:92:e1:96:c1:fa:
3a:a5:bd:47:09:4e:42:20:af:6e:fc:17:93:05:0b:12:b0:d8:
e5:54:77:f5:f0:2c:8f:08:f7:60:a4:2e:b5:ae:a3:f3:6d:33:
f5:0a:96:11:44:65:30:64:f5:60:55:eb:f0:8e:f4:02:e2:3c:
72:6f:01:35:f6:36:9e:a4:d8:c4:26:f7:77:f3:39:8d:14:7c:
74:e6:24:00:93:3b:6c:d7:bd:1b:9b:8e:d2:82:78:8b:14:5b:
f1:67:ff:dc:e8:42:4f:a1:b4:cc:7a:99:68:74:82:13:4a:b1:
0b:d8:66:1a:07:84:4e:5e:79:fa:7b:16:92:44:b2:cd:1d:3d:
ab:38:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:55 2025 by rpki-client