Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: 4l4Ap4MDFS+bZlg0Cb2dIlBlICa1ykfRiuewcYiUijE=
Subject key identifier: 4E:99:5F:30:28:6D:EB:C9:D5:23:1F:5B:1C:CE:06:AF:88:32:04:49
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0199FC58AE33EBECC731BFA8E5DAA01B2DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0FE5
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: TV5Cit8/kF/QvWO3T4m81zTqRfnwOU5flPfuH9Y8H0A=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ae:33:eb:ec:c7:31:bf:a8:e5:da:a0:1b:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=4e995f30286debc9d5231f5b1cce06af88320449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:63:7c:1d:3d:ee:f5:99:80:47:8c:5b:6e:
04:29:5d:c7:4e:69:e2:b4:ac:87:39:48:ff:fb:cb:
47:5a:4a:d4:80:0d:39:d6:2f:7f:10:26:3b:96:c2:
b8:45:be:ce:58:6d:f1:fa:ad:ca:f5:13:f8:80:5a:
22:e3:e6:42:22:aa:11:96:95:56:d0:36:d8:9c:e8:
f3:2c:76:88:4b:1a:11:7d:7f:dc:47:ba:4d:96:10:
1e:4d:4b:21:c1:6f:53:be:9a:de:ea:ba:25:1e:24:
91:f7:cf:73:4a:85:37:2c:df:f3:37:68:c0:a2:88:
8d:e3:cb:45:e8:8f:52:13:5f:ce:7a:f5:2e:c0:a4:
d5:1e:ed:00:61:3b:bf:f4:2a:e0:a5:0b:34:c8:fb:
a5:35:ee:78:27:cc:d1:67:44:f2:ac:cb:2d:e2:15:
ea:7f:a8:76:cf:ac:a4:6b:c4:2c:02:a2:68:e2:70:
06:a3:16:39:c3:68:49:2f:b1:7d:1f:d2:95:07:f5:
4d:12:cf:80:99:92:16:94:71:73:cc:e6:a3:5e:48:
ac:46:f3:4d:2f:cb:6c:56:c8:ed:b0:9e:57:41:14:
9f:03:e2:a7:cb:53:4b:3e:4c:07:a5:c8:99:e7:80:
ad:3f:20:e6:87:48:a6:64:84:91:4d:9c:b3:1b:88:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:5F:30:28:6D:EB:C9:D5:23:1F:5B:1C:CE:06:AF:88:32:04:49
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:26:b6:ab:48:ad:4f:ab:e7:3b:bd:b0:9b:dd:da:92:db:bc:
cb:1e:9f:d9:0e:78:8c:d3:0e:26:0a:92:77:7c:da:48:d1:bc:
7e:ea:f9:11:cc:cf:fd:47:e0:8f:74:e8:15:14:f7:27:4b:56:
7f:57:f2:ed:c7:a2:0a:09:20:4a:5f:fb:db:75:e2:47:84:4b:
0e:71:26:2c:1b:bb:fa:62:1b:26:bf:d0:db:8a:9b:ac:35:63:
0b:f3:12:4f:33:88:21:cf:eb:ee:bf:e5:7a:30:ec:81:6d:41:
6b:97:80:95:da:d0:1c:64:88:7d:fa:f9:d1:59:f4:05:af:6b:
3b:8c:fb:16:66:a3:6b:ee:5d:fe:35:76:00:6a:31:e2:35:6c:
1f:fa:72:03:da:3c:58:42:61:ad:9c:de:a8:e9:e7:53:34:41:
b8:f9:e1:5e:79:8c:81:d2:1e:21:c3:bf:1b:34:ff:bc:76:d0:
b2:0f:5c:e7:c0:10:28:9b:f8:c3:65:5f:6d:e3:4e:b1:c6:a5:
ee:fd:3c:46:1b:00:50:cc:ba:aa:26:92:db:ee:29:1e:79:ce:
22:de:fb:3b:4f:de:c6:99:e2:ba:ab:cc:8f:e2:75:ef:22:db:
11:a9:cb:f2:20:8f:c1:bb:a2:53:91:15:bc:f4:cd:2d:65:ce:
ec:8b:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:29 2025 by rpki-client