Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: Ck/oHwVpK/nrg9IDqbL7ttBcGesIP4M6pYpneZXd5YU=
Subject key identifier: F7:7D:42:3A:7A:1A:B8:20:89:DA:49:25:CB:29:33:32:1C:C1:70:BD
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 0199FB45EE79F0D7FEE71518B09AB9DEF5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 07A2
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: 3pfwS1P6VTVKkn1lTG4CGhMsUsYFqH1evKM/Zz4v9sQ=)
2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ee:79:f0:d7:fe:e7:15:18:b0:9a:b9:de:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=f77d423a7a1ab82089da4925cb2933321cc170bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:d7:ad:2b:dc:44:2b:29:cc:e5:ab:c8:6e:
76:41:b7:c4:76:68:2c:bf:44:b1:d4:5d:ff:27:ec:
68:2b:34:07:3a:8c:1d:ae:01:91:7a:6c:84:8b:21:
fe:fe:14:08:d9:9e:9e:a0:37:92:05:e1:8d:99:0b:
3f:36:c8:2b:8b:c3:ac:b5:10:08:7b:23:d0:ac:ae:
6b:51:3a:fc:94:bb:36:ea:46:38:65:25:70:a0:cd:
05:9e:57:1d:60:b8:11:ef:23:ae:8d:63:66:73:95:
be:dc:a3:57:db:25:31:ca:e8:48:2c:ad:38:24:31:
f1:e7:39:35:60:85:bf:f4:f3:5e:7e:42:c1:b6:7a:
4b:06:9e:68:ee:3e:ea:73:f6:c2:b8:67:ac:d0:60:
bc:6a:50:d8:16:90:3b:a8:ce:b8:53:98:73:1b:ee:
47:b8:be:5c:e3:16:4c:09:61:a5:82:5a:6b:1c:a6:
55:f6:1d:49:0c:03:bc:80:b3:88:95:c6:38:7f:8d:
d6:4c:b5:d1:1e:7f:cd:12:50:8b:eb:2e:36:4d:dd:
b8:57:86:e0:5f:74:15:76:7f:66:f3:f8:16:de:a9:
f1:cb:41:d0:da:d1:a0:ee:d0:2a:f1:07:d5:27:04:
e5:35:3e:75:f9:20:2d:a2:d9:9a:92:dc:83:7c:5c:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:42:3A:7A:1A:B8:20:89:DA:49:25:CB:29:33:32:1C:C1:70:BD
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:db:c7:56:83:91:5f:ef:b9:ec:66:2c:71:58:8c:e7:6f:ee:
70:64:7e:d7:83:4b:bd:58:ee:bc:2e:f7:40:c4:fb:42:85:d6:
2f:68:86:00:d5:81:cd:79:e1:a8:d4:6e:66:f0:2d:d6:c8:eb:
d3:38:b1:ba:28:9f:37:c6:c5:58:54:fd:3f:f0:18:fe:9b:9c:
6d:4d:7e:66:cd:95:f0:b9:f2:a3:02:1c:db:0a:63:ad:37:6c:
18:b5:fe:ec:21:c4:9e:f8:5d:03:22:7d:35:5a:2e:72:d3:c0:
a2:e8:50:b7:e7:a3:3b:c0:11:25:ff:f6:6b:a0:93:20:9c:f5:
f3:a6:43:1c:b8:77:bb:58:36:80:1d:b2:8e:9a:95:4b:ef:93:
9e:a0:e3:48:87:88:c9:67:38:ce:a3:c1:c0:97:b9:4b:49:3b:
d7:50:81:a6:0b:75:18:e2:7b:1d:a7:77:6a:2d:48:30:c3:b5:
2a:07:be:93:44:3e:e3:3c:08:0f:58:cf:1d:e8:ab:8f:8b:47:
dc:8d:cd:66:56:8a:12:90:62:34:76:76:80:ad:0d:9e:95:25:
76:72:f4:b9:b6:4b:b8:e4:2d:ac:21:86:37:15:31:d1:20:2b:
22:50:2c:ba:b2:28:03:18:02:d6:b4:42:24:9a:2d:bd:56:07:
a1:24:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:44 2025 by rpki-client