Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: 5cY/sKkZDnlgRTU9HUeKXLMik9JTMI72jKNWwVRFZH0=
Subject key identifier: E7:E3:2D:2B:B0:E5:0A:7E:A6:1C:46:FD:34:27:E7:72:0C:17:0C:F9
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 0199FCFD4F946CA92965FD65642F072C574F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: ntcQwdS0x7/FnU4awoAHpC0ubDg61mC4BlL/89dqjf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4f:94:6c:a9:29:65:fd:65:64:2f:07:2c:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=e7e32d2bb0e50a7ea61c46fd3427e7720c170cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:b6:d6:19:22:49:78:5f:17:37:1c:2e:7a:
5c:7c:0e:53:6f:d6:ed:47:86:22:68:22:46:f1:d3:
b1:f3:99:9b:36:08:50:27:e4:2c:b1:46:3d:5c:e8:
cc:f6:77:0a:43:69:c7:38:8f:b5:7f:26:dc:66:59:
59:a3:81:3f:51:c6:78:5f:81:29:7c:0c:2b:ce:14:
f8:26:26:35:cb:6f:25:f8:9b:af:06:53:f7:59:b5:
f2:d9:3e:26:e2:dd:92:62:7f:bd:c6:2d:a2:83:63:
f7:d3:db:58:88:93:c4:12:ab:d7:84:00:53:15:39:
75:85:8b:63:3b:d6:d4:87:8f:73:2a:a9:43:a7:b9:
6c:0f:2c:78:0c:f1:b1:fe:1b:e1:6f:f1:a4:01:c1:
28:8d:32:ef:2f:4b:96:66:13:78:ff:a6:4b:9c:f5:
ce:c7:89:9c:e3:07:4f:b3:ca:c4:b7:e0:f4:c6:0a:
f8:20:38:b6:01:39:19:3c:86:46:0b:bd:40:b3:f0:
c5:71:1b:eb:ee:d8:d9:aa:e5:93:33:23:be:78:e4:
e2:ac:f8:f8:67:96:a2:2c:74:53:0e:24:d2:f6:c3:
1b:46:b3:b4:5b:df:41:de:6a:f1:c6:af:6b:9e:85:
1d:dd:5e:28:58:c2:cf:b7:b2:2f:8a:f8:32:a5:1e:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:2D:2B:B0:E5:0A:7E:A6:1C:46:FD:34:27:E7:72:0C:17:0C:F9
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:d9:d8:c3:2e:d4:36:e5:4c:c1:57:93:83:2d:9b:6a:de:
c5:14:82:d4:79:fd:33:06:92:5a:1e:3f:64:05:dd:8b:12:4c:
31:90:e5:a1:c2:ce:46:6a:48:ed:4e:c0:e3:b1:e6:16:15:04:
36:cb:27:fc:27:42:c2:63:1d:52:03:42:54:4a:d9:7c:a7:5b:
0d:a9:e6:14:c6:e7:23:ba:29:4e:ed:2d:f9:2b:3d:e3:62:82:
2c:0f:52:dc:0d:38:8e:37:8e:cf:fd:05:3d:d8:6a:de:e5:0c:
49:5b:aa:84:31:a4:0c:e6:ea:d4:7e:3a:c8:40:2e:54:81:76:
77:96:6b:82:35:f8:dd:e7:42:dd:69:f6:ff:11:02:49:80:5b:
0c:70:cd:10:89:97:54:29:ef:d6:eb:a0:fb:eb:dc:11:e4:70:
17:52:f2:7c:ad:08:11:67:37:39:9a:52:c9:75:22:89:33:b2:
43:ec:55:2f:13:00:22:1c:d5:49:86:6a:af:a5:8d:fc:e1:ff:
0d:57:d4:7d:94:24:4d:07:08:22:78:07:4c:13:3b:fa:09:09:
81:6b:1a:2f:ef:3e:d6:af:6f:d4:b9:9e:eb:61:15:4e:51:a8:
44:a3:dd:3d:50:16:fe:dc:8f:e5:2e:b4:57:f2:87:1c:a9:81:
b6:83:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:35 2025 by rpki-client