Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: 32YptJb1ClXINJs1kuAZ5/+EGSOVRJlAtdKJn1339dk=
Subject key identifier: F2:6C:85:ED:52:A5:BA:66:F8:AD:9D:16:32:57:06:27:9E:11:BE:31
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 0199FCFD371E710AA5E194313E83130E93F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 1153
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: YVfFtGSChw3B6Esm5Xld28itU/gQzaLItLnCeqMk3kI=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:37:1e:71:0a:a5:e1:94:31:3e:83:13:0e:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=f26c85ed52a5ba66f8ad9d16325706279e11be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:8e:5d:41:17:9c:90:66:5f:5a:f0:91:5e:
b2:9e:ae:ff:2f:b4:0f:7f:f0:15:42:21:b8:25:6c:
91:56:f0:9b:15:7c:23:f1:a8:54:a9:91:d2:ac:3c:
b5:ce:09:b1:e6:59:46:d2:ed:13:53:9e:81:bc:5f:
5b:54:2f:1d:e3:f9:c7:8a:5c:9e:3e:d5:32:66:40:
d2:74:a3:8e:87:11:ac:76:21:06:22:2e:21:83:a4:
fa:3a:8b:f5:45:a7:b7:ec:b1:34:05:64:82:c0:2e:
34:b5:3b:40:26:33:2c:79:5b:e2:93:25:0d:78:3b:
d6:4c:be:48:ba:d1:11:7f:16:e9:57:6f:63:08:82:
3a:4f:b5:5c:5a:ea:f5:9d:3d:0b:6b:e8:50:29:70:
a5:5a:19:e8:49:41:35:9f:aa:9f:2a:22:9b:91:03:
d8:90:f4:14:f1:83:8e:06:b0:d2:91:52:3a:0e:00:
a6:b2:28:84:1d:f5:0a:8f:32:a4:40:a7:8d:b6:a8:
97:72:cd:03:0c:4e:2b:6e:f5:7e:71:05:50:1d:29:
e1:f7:31:65:78:e6:ed:1d:29:59:6b:0e:a0:33:8e:
4a:ac:c7:31:90:30:cb:8a:37:de:a8:ae:d4:1a:08:
e3:d8:2e:74:28:04:f9:ec:8c:c2:8e:b0:6f:27:95:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:85:ED:52:A5:BA:66:F8:AD:9D:16:32:57:06:27:9E:11:BE:31
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:6d:bc:6a:04:02:13:30:e8:4e:55:fb:f9:3f:27:a2:d3:
9f:b0:f2:ef:d9:e8:35:5e:4d:22:0c:49:3c:09:52:99:7d:08:
d1:41:4b:3c:23:dc:a6:d5:1b:4c:13:dc:60:7b:5b:f3:f0:74:
ce:b8:b9:e8:67:c2:29:a5:8c:f5:13:2d:c5:a9:fe:28:a0:ca:
42:76:e1:81:d4:30:93:51:22:f3:9c:83:63:a4:0b:1e:0d:d8:
20:77:a3:45:cc:c0:2c:ac:dc:5a:bf:ea:4a:00:ef:8a:35:f6:
23:e3:47:62:dc:7a:31:a4:91:e8:3d:fd:fa:ca:95:5c:6e:a2:
d7:a4:42:08:2f:77:ca:42:37:19:e1:b7:3d:99:2a:c3:c4:36:
35:a7:18:96:69:eb:b8:84:8d:39:03:f1:6a:d9:be:60:61:3d:
0f:34:9a:dc:82:f0:b1:89:15:54:0e:9c:24:aa:fc:b9:21:0f:
00:5f:79:b8:f6:8f:b9:2a:5e:ab:df:24:7b:46:59:61:41:66:
84:62:8d:1c:21:bf:de:1b:11:25:2a:8b:58:52:de:81:dc:87:
b4:f6:29:b4:6a:98:e9:9a:a0:3e:ba:d8:7c:44:d4:b9:d3:2e:
1c:e8:b6:59:79:a6:5d:7f:f5:21:f8:f0:8c:84:a2:b4:7b:cc:
02:b4:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:09 2025 by rpki-client