Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: IxqqzkVgbbZR0NPmH12Ma5GxQsV11MMcCOrzVzbygzs=
Subject key identifier: 1F:C4:E7:E8:DB:9D:61:54:ED:DF:22:D3:F8:A0:55:3B:0F:4D:0E:3D
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0199FE47154EFA2F4D4B658DCB17E7A1CA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: MvE9dZbOKYKq4o99dntnlBUUbqjOb9Rpol9meX7J8Fk=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:15:4e:fa:2f:4d:4b:65:8d:cb:17:e7:a1:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=1fc4e7e8db9d6154eddf22d3f8a0553b0f4d0e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:e1:eb:c5:e6:1c:99:76:70:2d:da:fe:d5:
45:48:0f:aa:c2:ba:83:7c:68:81:fa:4a:3d:3a:84:
81:c9:3a:b6:c6:13:94:87:ac:8e:9b:f2:06:20:05:
56:23:2a:83:e5:8f:d8:c4:c9:29:d4:f1:19:46:9c:
ef:af:86:30:16:21:cb:50:42:18:82:c2:d5:b3:b5:
53:c7:dc:71:96:55:2a:ab:53:fb:3f:0f:1e:58:97:
f4:65:bc:be:02:5b:52:f1:03:1b:5a:4a:a4:9d:d6:
0f:52:c6:9e:5c:32:0f:0e:2b:9e:d6:dc:ad:10:70:
ba:7c:f1:6d:22:62:41:1a:2e:3c:51:d5:cc:47:f5:
96:df:3d:5e:1c:51:5c:28:23:51:71:2a:7f:32:54:
dd:c1:cb:62:00:e2:54:b2:7c:cb:a5:3b:6d:8a:34:
5c:1d:d8:82:c9:30:e8:48:18:7b:08:05:a9:d7:28:
8a:91:36:65:62:eb:74:50:0a:c9:c4:47:c7:52:7c:
6c:aa:98:b0:02:76:ff:05:c3:36:08:11:c3:62:84:
79:b3:fb:57:65:f8:40:c3:5a:7b:f6:59:6e:8a:d7:
27:a2:c5:9b:88:f7:27:62:49:e7:96:30:a7:c1:d4:
4b:4e:e5:16:a2:8d:0b:68:d9:82:d7:6d:83:7f:a8:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:E7:E8:DB:9D:61:54:ED:DF:22:D3:F8:A0:55:3B:0F:4D:0E:3D
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:7e:f2:ce:58:dd:aa:f1:7f:1b:f9:80:35:b2:a0:ef:39:
44:42:17:0d:bd:22:0e:d1:2c:d8:8e:06:64:53:8c:1e:5b:d4:
e8:d4:3d:47:27:b3:ed:b0:cd:5d:fe:20:05:32:91:41:68:57:
1b:44:c0:5e:b2:88:13:88:e8:61:75:36:1b:0e:24:23:90:11:
60:40:5c:92:9a:14:63:25:f1:41:af:01:95:99:57:66:a9:3c:
60:27:87:f8:7d:40:7f:09:66:cf:0b:c3:85:ff:11:f5:1d:7c:
65:07:3b:97:fe:9a:6e:b1:30:cd:ab:7d:fe:a3:b8:97:b4:6a:
2c:f3:a4:1c:38:bc:61:a9:d0:9a:06:80:e5:09:4b:96:87:e9:
04:fa:8f:9e:16:72:a8:c1:64:46:78:fd:27:10:aa:47:24:06:
1e:85:e1:b5:2e:08:78:36:5c:58:25:ba:a5:c4:ae:44:27:95:
20:6d:31:2b:41:60:74:cb:aa:63:59:f6:1b:8f:22:6c:f2:a8:
50:40:50:7b:df:1a:4d:85:12:35:6a:3f:1b:91:7e:92:e2:e8:
89:60:2b:79:96:e8:fe:60:da:c5:8d:39:06:f9:23:dd:f6:38:
d1:4b:db:d7:44:b1:d1:f0:0b:98:a0:9e:e7:9c:fb:e2:6c:a7:
7c:2c:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:38 2025 by rpki-client