Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: r8ImkXKOSfCEJCiFQZgGphljdL39zYyIY8PbCG6FIQ4=
Subject key identifier: 53:1E:47:22:06:86:67:38:82:65:B4:52:65:29:AC:AA:56:E3:68:D5
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 019A01B50B6EEEBA9B9D17F2BE3514271D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0E08
Signing time: Mon 20 Oct 2025 13:00:33 +0000
Manifest this update: Mon 20 Oct 2025 13:00:33 +0000
Manifest next update: Tue 21 Oct 2025 13:00:33 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: 0Yl9vecphGgTGhTN9mbN56DBfHR8gH1qJ5wKUOKe90Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:0b:6e:ee:ba:9b:9d:17:f2:be:35:14:27:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Oct 20 13:00:33 2025 GMT
Not After : Oct 21 13:00:33 2025 GMT
Subject: CN=531e4722068667388265b4526529acaa56e368d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:6d:49:11:b2:1b:eb:c3:90:63:f0:9d:35:
b0:f7:08:49:ed:a1:f2:0b:88:c7:d2:9f:3d:ac:ea:
b0:7d:e1:b9:9a:d4:66:d3:44:8f:af:21:80:68:2c:
de:99:df:da:65:b2:e5:14:3e:e1:35:58:99:3f:5d:
f7:78:69:e1:80:ad:0f:04:7e:e9:69:40:bc:ca:95:
12:b2:35:4c:28:44:7f:e7:b8:34:e2:a9:42:d5:f6:
d2:ac:e1:26:49:9e:96:1e:ae:29:fb:1a:07:b6:fb:
76:e4:ac:06:11:04:bc:92:b9:a6:72:a6:5f:86:90:
be:a7:a7:6a:f3:0d:58:b1:6c:e3:7d:83:cc:30:82:
6c:63:5c:c8:de:57:f2:b8:6b:2e:bb:44:78:1e:54:
71:63:d4:ef:b3:ae:69:7c:ab:13:3a:74:58:35:30:
0d:3d:da:5f:01:71:c6:96:b5:59:8d:a8:64:bd:a7:
a7:07:11:46:9c:a9:ae:64:25:44:1a:33:f9:ff:ce:
be:a4:a9:6a:1d:9a:fa:0c:03:5a:99:87:31:7b:48:
8e:85:03:38:dc:64:9c:2a:d0:70:39:19:66:93:39:
8f:a7:c5:cd:d8:5e:e4:91:dd:40:e7:d8:11:c7:7e:
c6:f1:4f:26:1e:d8:dc:04:08:de:cb:51:b0:5e:15:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:47:22:06:86:67:38:82:65:B4:52:65:29:AC:AA:56:E3:68:D5
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d6:72:66:4e:3e:cc:5e:7a:7b:3b:a2:96:25:f7:a7:4d:c3:
00:10:83:b5:59:f1:c3:30:73:33:9a:6b:5f:5a:7f:7d:ca:d9:
d3:ac:22:bc:bc:2e:6b:ae:96:0b:8e:a7:21:68:b8:80:c9:2d:
13:b8:ee:be:5f:f4:5e:f4:1e:67:77:3a:c4:57:a7:f3:75:c4:
64:33:77:0c:66:e2:50:66:f5:ee:9b:f6:8e:90:66:49:ba:14:
05:5e:85:a0:25:5d:62:66:98:40:bf:fb:46:94:c5:8f:62:3b:
a7:51:ae:14:07:76:3c:33:d4:ff:81:0f:ce:71:8e:7d:b7:c6:
49:38:7d:f8:7a:71:9f:d6:b6:ea:0c:e3:93:32:0d:4e:99:25:
b7:f6:26:f6:5b:0b:c4:f8:2a:56:12:93:45:55:2b:15:80:a5:
3a:fe:28:58:41:93:e6:7f:51:65:5f:86:76:28:49:46:c5:0f:
f7:e7:e3:54:45:90:5b:08:b2:48:9e:a1:fa:61:5e:22:55:31:
85:70:e9:be:7b:e1:1d:2c:ab:6b:c9:7f:f2:e1:9d:a9:85:32:
44:4b:c1:2f:ee:e3:98:ee:8d:c0:1b:b7:ec:85:42:80:3f:e0:
fc:ab:a8:37:5a:92:68:98:cd:36:d4:2d:da:ff:ff:d9:0e:63:
fe:c7:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:44:37 2025 by rpki-client