
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier: 21a8C/VZtreC0HXjM+fvBSuu+sBEh1iZ3vlyeBwNxmc=
Subject key identifier: E9:DD:F5:A6:BC:FB:01:1A:DC:1F:77:C1:8A:54:B2:FF:B0:70:27:A7
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial: 0199FAD7B290B81C1569B67723CD5441A710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number: 06CF
Signing time: Sun 19 Oct 2025 05:01:03 +0000
Manifest this update: Sun 19 Oct 2025 05:01:03 +0000
Manifest next update: Mon 20 Oct 2025 05:01:03 +0000
Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: vLpaPv7XLNT9dNbaWOIQlxcIIbF7bcehU31SYNhM59A=)
2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b2:90:b8:1c:15:69:b6:77:23:cd:54:41:a7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Validity
Not Before: Oct 19 05:01:03 2025 GMT
Not After : Oct 20 05:01:03 2025 GMT
Subject: CN=e9ddf5a6bcfb011adc1f77c18a54b2ffb07027a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:23:41:1f:90:d4:ce:45:92:ab:7d:c2:21:
ca:83:d7:6a:7a:68:d3:6d:d0:f2:56:28:f8:23:aa:
43:3d:8f:a8:1b:4b:98:75:af:bc:9d:f4:35:eb:94:
00:87:8a:84:4a:1f:29:d5:dd:63:46:6d:0d:68:e8:
27:e8:ce:e0:b3:71:dd:7c:80:91:fa:49:50:ea:b3:
66:18:d5:ed:45:9f:d0:c0:22:16:f8:46:83:a8:1d:
2e:09:5c:e4:6a:b7:54:74:33:59:20:0d:f5:8c:77:
a0:5e:9f:a8:e1:52:77:8b:60:4d:57:2a:8e:17:53:
58:ef:ed:b0:86:3b:80:31:fd:0d:45:39:15:22:20:
0e:e9:12:3a:0a:3f:58:1a:4a:b8:54:86:68:3e:d0:
fd:f5:0f:77:ea:c7:5d:e5:56:4a:59:8a:a4:78:8f:
d5:31:44:1a:2e:1d:dc:c6:d8:f3:e1:ff:e4:9e:4a:
b4:fb:0c:1b:cf:d8:7b:25:49:02:67:ce:23:4c:ff:
c2:17:10:a5:8e:b3:23:ec:41:b4:03:81:29:d6:66:
ac:dc:33:86:a0:eb:9b:ff:31:94:25:3d:4b:28:75:
11:76:b6:2d:d3:63:d5:ef:26:47:0c:e5:c3:e9:5e:
0c:eb:48:f4:59:ab:6a:9f:7c:93:4c:de:94:97:4c:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:F5:A6:BC:FB:01:1A:DC:1F:77:C1:8A:54:B2:FF:B0:70:27:A7
X509v3 Authority Key Identifier:
keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:b4:b3:db:60:68:25:85:9b:95:0e:46:1d:9c:2b:b9:e1:
76:79:3c:31:a2:35:5b:de:77:89:0c:d3:9d:84:45:7a:75:97:
90:b7:4b:8f:d0:6c:58:84:7b:b8:05:23:4c:6a:7c:57:64:68:
b8:ed:9f:c7:f4:a4:ea:d9:15:04:e7:89:03:10:56:28:91:e8:
4f:12:86:b9:94:35:eb:66:08:9d:cf:5c:b7:45:c9:e9:4f:00:
27:41:8e:97:f7:7c:61:03:ad:f3:df:17:cd:8a:89:2a:f5:ff:
c1:ac:70:e5:d9:f3:70:f6:ee:96:27:ef:5e:a9:b5:61:a7:01:
8b:28:b1:e6:60:63:a9:67:ad:d2:86:f5:aa:07:27:ad:a6:de:
c3:84:c0:4b:78:4c:98:89:f9:85:a0:7c:e0:dd:2e:5f:44:dd:
ea:b3:0d:5e:3a:4d:f4:cc:67:9f:92:cf:e6:95:9f:79:4b:1a:
2a:62:1e:11:db:df:41:8a:6d:cd:fb:5a:94:27:2e:8a:ee:20:
43:c6:1f:9b:53:51:08:0e:ca:75:8d:d7:d0:1a:ca:17:2d:5b:
c1:71:57:3f:a4:12:e2:21:0e:6a:a6:37:71:65:f6:a8:81:70:
61:72:85:b7:e9:00:9c:16:4f:55:b4:20:f6:49:42:c1:48:5f:
a1:a7:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:57 2025 by rpki-client