Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: NCvfniGvjGIG2aiqFTmmhz2H7fQLDKHN/Vpa/U027/U=
Subject key identifier: 4B:5B:E7:B4:71:A4:50:5F:E2:49:DC:86:D8:29:D6:79:B9:16:4A:BB
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 0199FDD9B49FA9B0AA11721E8FB9E785DF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 03B1
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: +ugI7SwmVDVyzi6GIXkLTlNGYmrwwB5M0jCSy9xS3TA=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b4:9f:a9:b0:aa:11:72:1e:8f:b9:e7:85:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=4b5be7b471a4505fe249dc86d829d679b9164abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:f0:16:43:ef:46:57:a8:ef:68:21:a3:86:
0a:3f:64:e5:2a:06:f5:7b:32:95:2b:fa:99:50:cd:
9a:49:a8:21:9e:85:b5:42:13:60:90:36:26:cc:5e:
69:32:bb:3f:ca:0b:10:34:b6:c4:06:1f:fd:9a:7d:
05:c3:71:9b:54:9a:f7:01:78:ee:03:d3:53:cc:94:
e4:55:ef:05:59:70:92:a3:8c:bb:17:2e:ed:91:f0:
30:97:e2:23:fe:52:71:da:e4:6f:08:58:25:df:90:
52:01:ab:73:c3:5f:c7:1b:47:17:2d:39:d2:84:d5:
06:94:f7:58:a0:24:58:7d:f1:8c:32:1c:63:68:96:
6b:db:77:39:55:33:e7:c9:d1:71:46:d6:23:55:af:
ca:43:21:7b:63:1e:5b:43:eb:ba:c9:6e:b9:9a:e9:
81:fb:20:7a:af:42:d5:fc:db:1a:d7:04:e3:8a:cf:
35:96:8b:fd:2a:fb:35:8f:2f:4c:85:b8:2e:43:0d:
ae:26:23:e7:aa:64:3b:c4:44:e0:07:10:75:23:64:
07:c6:31:22:f1:cd:a9:78:53:af:90:cb:d6:c3:73:
d9:78:fd:da:1c:d5:98:2b:76:6e:e9:15:98:1f:61:
81:51:fd:58:2e:aa:55:58:ce:64:e1:ba:07:6f:ff:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:E7:B4:71:A4:50:5F:E2:49:DC:86:D8:29:D6:79:B9:16:4A:BB
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d7:f2:8a:88:82:8b:4f:d4:7e:e8:1d:35:1b:d6:b1:2a:74:
b7:40:d2:70:ab:d0:ea:2b:82:86:69:35:84:6b:6b:40:ad:be:
44:50:5c:68:5c:8d:88:13:f6:16:75:d2:b8:7b:f7:60:4d:74:
93:62:be:80:fb:00:c5:a5:27:5b:34:27:7d:1b:4f:79:ae:d2:
b1:b0:48:15:fd:2a:6c:26:4f:68:3d:64:18:40:c9:85:63:0c:
a7:fb:c8:41:00:28:e3:81:33:df:2f:13:83:7b:d8:d2:91:5b:
d6:20:b7:28:9b:a6:ee:fe:ba:26:30:d5:8f:17:c7:28:96:e0:
a6:82:09:ff:7c:cc:d6:b2:cb:fc:21:aa:f0:41:d4:73:07:1e:
9a:5f:07:89:1d:b3:36:de:3e:a4:88:06:d8:4d:8f:93:77:0a:
e0:e1:79:81:fc:f4:e7:f6:e6:06:56:d7:dc:d4:dc:f0:23:33:
cd:87:8b:e9:26:52:e5:6a:69:31:f3:fe:f7:56:ac:d0:8f:91:
d6:6d:0b:b6:be:11:38:c8:ff:b0:6e:de:16:4d:b1:32:21:bb:
58:04:7d:e8:e7:d2:85:ff:1f:44:a0:aa:6d:b3:16:0b:2f:71:
38:82:89:62:91:23:e3:fc:8d:29:61:ee:ae:6d:62:cd:b1:11:
3a:74:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:05 2025 by rpki-client