
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: nlNlr0wPtJevchXNp5Paryn2qwmkotgf9800iFWwaQs=
Subject key identifier: 2F:1C:D3:F0:9A:C0:17:19:37:0B:C7:1D:21:4F:41:C8:A3:30:F7:3F
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 0199FBEB2080AE474105B8FF2666305941A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0CD0
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: eRF3JKzAaP+onfVlsEhY+YYAbyRWDJwurPKu15zJXWo=)
2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:20:80:ae:47:41:05:b8:ff:26:66:30:59:41:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=2f1cd3f09ac01719370bc71d214f41c8a330f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:f8:39:7f:95:df:8e:41:55:3b:86:68:84:
71:d4:0f:c1:50:4e:7b:94:44:30:f5:71:49:38:e4:
b6:36:31:99:4e:1f:76:e4:92:6f:51:ae:a5:23:ca:
5c:3e:87:a7:d1:76:8c:da:81:36:57:17:0c:bd:d6:
d3:f7:b3:0c:cf:f6:77:1d:50:a7:13:50:95:bb:9a:
ea:7a:3e:dc:99:0d:72:00:c2:e0:62:87:07:00:ea:
11:d9:aa:7d:e9:c6:4c:63:2c:17:ca:f8:8d:aa:1e:
16:dc:5f:b8:3a:85:90:0b:1f:f1:e7:ef:d1:61:f4:
1d:64:68:48:79:19:9b:4e:d9:f9:bd:02:e9:90:a5:
cc:8e:99:4d:10:46:9a:6f:ab:f1:3e:13:0f:14:78:
44:4c:75:52:c3:1d:b8:46:4f:c7:8b:01:6a:cc:2c:
3b:e8:23:5d:84:5e:15:aa:cc:2c:e3:e6:9c:cd:8d:
27:bc:45:21:67:76:ba:b0:8d:ce:75:31:2e:59:55:
ef:e3:24:00:6a:17:f9:14:dd:57:7c:96:a7:05:30:
aa:6d:b8:ff:04:f3:ef:54:fd:cb:7e:d1:34:51:8d:
0d:ca:66:81:ff:3d:0d:e1:42:98:03:56:28:60:94:
12:05:8b:38:43:cc:d5:a5:d1:9e:e8:91:e0:50:fe:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:D3:F0:9A:C0:17:19:37:0B:C7:1D:21:4F:41:C8:A3:30:F7:3F
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a7:3b:b6:c7:e0:0a:11:3d:12:27:9c:36:cb:41:13:3f:b2:
9e:bc:1a:61:28:42:8d:1c:39:d8:18:e1:ee:8d:8f:ba:a7:0c:
8e:8c:46:0c:31:bc:95:18:86:8a:65:ae:19:7b:8d:fa:0e:ed:
95:b9:01:be:21:0e:34:61:f7:9d:d7:17:8d:cf:8e:31:60:23:
dd:e7:e8:bd:a9:0e:d3:17:85:cd:53:48:dd:26:0b:70:01:14:
73:26:c1:69:8f:af:16:1e:01:36:38:60:d4:e2:71:a0:66:6e:
e3:ce:b4:fe:72:61:fe:d0:e0:7f:77:27:83:3d:11:7f:44:bf:
78:15:f0:6b:b7:ad:7e:d3:80:be:58:b8:a5:f5:96:7a:8f:4e:
76:4d:e8:b1:61:ab:fb:9c:81:17:84:de:d1:2c:58:80:31:95:
27:c2:e4:6c:1c:3b:97:fe:04:3d:3a:76:19:a4:d9:df:94:26:
a4:dc:44:1d:c1:ac:b7:07:f8:05:50:56:c0:a7:a4:7f:63:90:
15:f7:39:94:f6:eb:45:77:1d:01:9b:e2:65:57:95:b4:da:c5:
a5:42:27:d6:dd:30:47:08:21:b1:d2:2f:76:ee:6b:94:cb:5d:
54:83:c0:1d:c9:fc:ea:3a:43:28:a6:70:7e:41:d4:b6:a4:09:
97:a6:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:17 2025 by rpki-client