Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: z2BZAqiE11cG+RPkL8EpLZc49joB6O+HXO6nTkH13DM=
Subject key identifier: F8:A7:49:87:8F:2A:49:17:21:C8:D8:C8:66:20:8B:93:68:F1:69:43
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 0199FCC6244D0D9AEF75542F38A4E7A062D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 06BC
Signing time: Sun 19 Oct 2025 14:01:07 +0000
Manifest this update: Sun 19 Oct 2025 14:01:07 +0000
Manifest next update: Mon 20 Oct 2025 14:01:07 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: QLW4HvkQvYHfhdJCiIqmzVN859mk7KQipPypx/Kn33U=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:24:4d:0d:9a:ef:75:54:2f:38:a4:e7:a0:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Oct 19 14:01:07 2025 GMT
Not After : Oct 20 14:01:07 2025 GMT
Subject: CN=f8a749878f2a491721c8d8c866208b9368f16943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:b0:41:06:c8:b9:50:be:fd:ec:be:89:fd:
5d:f9:ab:c1:11:e8:d0:c7:8e:f0:c1:ae:d8:6b:ad:
ad:d1:f1:b5:4e:9a:81:da:85:03:30:bf:0f:9f:c1:
bf:4a:0e:62:51:03:1b:1a:4c:9c:ba:a8:4c:8e:e6:
13:1c:82:f1:d0:ea:30:0e:7f:e5:9a:9e:97:d2:df:
3b:c7:67:f3:dd:26:06:1d:1e:a6:ee:1a:a4:db:3c:
07:48:8e:67:6c:f2:c9:59:b4:f3:f6:c4:8b:f9:0b:
cd:f4:cc:08:c5:6d:0b:34:7e:12:ab:af:d1:7b:75:
e6:dc:ce:71:89:e5:41:b7:ce:39:fe:da:a5:17:37:
5f:61:59:7d:b0:23:1b:80:08:f2:b3:fc:a8:80:cd:
b8:6c:30:e6:12:76:c2:93:e2:f6:2e:4e:3c:64:52:
78:15:9e:6d:d9:32:7d:30:04:34:6d:d2:50:a1:8f:
b1:cb:1f:f0:d7:92:ae:93:08:4e:9f:c7:4c:1e:5a:
e8:49:f5:8d:11:54:26:ff:00:8d:10:4e:a2:24:75:
f8:29:7f:31:89:a9:c8:98:71:dc:74:a9:1a:e2:c6:
4b:39:98:ff:d7:75:c3:d4:d6:36:85:35:0e:1e:8f:
86:d2:ce:cf:b7:3e:f8:70:e7:1b:1c:a8:7a:6f:0e:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:49:87:8F:2A:49:17:21:C8:D8:C8:66:20:8B:93:68:F1:69:43
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:78:a2:21:2e:38:7f:33:b3:62:ea:29:a7:3d:ba:84:4d:b6:
26:07:3d:16:a2:5a:22:f1:81:0e:0b:2f:85:03:5e:9a:ef:39:
41:cf:14:20:f6:2f:15:98:b9:2f:4a:0e:ef:17:98:59:ee:a0:
79:d4:45:95:f0:d6:95:6d:9c:ec:70:8e:be:e7:9b:e8:41:53:
a5:b9:29:26:7c:5a:c9:e0:96:e4:d5:4c:7f:27:34:36:bf:44:
58:3d:e1:ce:8f:7e:a1:3b:df:04:cc:b9:d6:3d:cd:50:47:79:
1e:10:ef:60:8e:38:f2:e7:39:ee:63:75:7a:cb:25:ad:1d:32:
36:f4:e4:8e:b3:66:53:44:05:be:3e:87:40:ee:a2:db:bf:0c:
aa:9b:7f:79:e6:06:ce:c1:0f:a7:ba:65:05:ec:34:19:59:ad:
fb:51:d7:b6:0c:5d:06:8f:fb:62:48:41:c1:2d:cd:76:ae:76:
33:a2:0c:40:a4:75:84:61:71:6a:63:22:a9:ba:dd:8e:1c:92:
71:5c:a7:c1:ae:0f:49:13:3f:6c:9a:d2:de:07:60:9f:97:fc:
ce:e0:4d:de:6f:dc:c4:21:85:29:4c:34:cf:4e:17:a0:c1:2b:
19:c5:7d:46:66:c1:b9:45:22:38:63:1f:75:94:39:32:d1:6e:
03:e6:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:41 2025 by rpki-client