Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: 0rK+8sSck59Q6Zd+yxjbAHPq1cxFNF9SBEyQfDVUM80=
Subject key identifier: 95:44:09:15:40:88:24:96:EE:4A:5C:23:52:5D:D0:02:1F:B0:65:9E
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 0199FC21C523B89AE22101FEA58F8955D0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0D39
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: GrJijrghrtEEmwhKuYiyvWfR9XIeVd+pKXE/0S0Z4MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:23:b8:9a:e2:21:01:fe:a5:8f:89:55:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=9544091540882496ee4a5c23525dd0021fb0659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:44:1c:70:b9:0d:9d:f5:94:4a:71:9c:13:
89:59:ea:f9:9a:fb:1f:79:03:2e:e2:1b:ea:77:2a:
6c:18:34:ee:76:9a:3c:cc:10:3c:68:be:e9:d3:3f:
a6:22:ab:89:0a:04:ed:7d:29:97:58:d1:df:5f:e0:
8f:9e:d6:a8:6a:63:7a:c0:9d:60:18:5d:01:c9:f4:
6b:5f:00:b9:6e:56:8c:0a:6f:66:d0:12:88:9a:fb:
92:b6:67:dd:b8:ab:f0:a5:35:46:78:6c:ad:26:0c:
a4:27:b2:79:19:f1:ea:c5:39:44:01:3c:88:16:6e:
7f:48:08:fc:e9:51:1d:db:e2:65:15:a2:d1:41:4b:
56:5d:a7:93:34:62:db:42:3f:2f:93:65:40:57:bc:
98:b7:17:fc:0c:ef:ef:3b:fb:5e:63:8b:1e:b0:d4:
15:53:9a:12:2c:fe:4f:ab:43:39:aa:f2:9f:17:04:
4f:14:93:83:d5:94:37:15:64:75:2a:22:83:d1:db:
68:60:ec:1c:c5:92:87:6b:e3:bd:38:7c:95:d4:34:
2f:73:9d:7e:05:7b:1e:59:44:06:e0:cb:cb:1e:1d:
52:bd:cb:1c:32:38:85:0f:e2:d0:f0:5b:9b:93:90:
4a:8e:44:fe:b1:cf:0f:0e:fa:48:73:69:ee:2d:9a:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:09:15:40:88:24:96:EE:4A:5C:23:52:5D:D0:02:1F:B0:65:9E
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:0e:9c:b2:3c:2f:8f:5a:1d:55:5b:3a:9b:30:0e:7f:3b:
6c:b1:93:c3:76:a5:b1:68:41:22:43:84:4e:5c:9d:61:11:6c:
d9:a1:6a:ea:73:e8:33:58:75:1f:79:51:b4:56:84:46:c8:5c:
66:6d:fc:f9:99:56:5a:6b:19:36:11:58:1e:87:af:2c:05:59:
99:d4:28:cb:c7:50:1d:30:03:3f:cf:07:64:2a:2a:77:af:85:
8d:44:55:08:89:41:30:61:be:b2:a8:ce:3f:85:39:7a:92:08:
59:00:72:e7:ee:c1:7e:6a:1c:9e:0e:92:32:25:fa:26:cf:5c:
c1:56:df:bc:aa:74:0a:c2:45:08:00:4d:50:38:fd:f8:d4:fe:
fa:6e:96:2e:5a:d1:12:12:e5:61:a3:cf:c9:d4:6a:80:9f:40:
28:aa:35:63:68:a1:ba:8c:48:57:cc:18:5b:2d:34:f2:8e:fa:
ca:24:47:3c:e3:8b:fd:b6:29:40:0f:12:4c:e0:0b:1a:f8:19:
c0:d9:80:1c:91:2d:5b:06:67:1b:2f:a4:7e:25:db:a7:c6:08:
a7:1e:d0:be:d6:9b:65:ec:37:a0:30:84:88:cc:2a:22:94:42:
3f:7e:b9:2c:8f:85:46:ec:53:ec:c4:84:71:2b:cc:83:c5:05:
46:17:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:59 2025 by rpki-client