Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: SAinpvJO1QwfbKKCLz/FtAJ1XrTC3KxURjpgJ5rduRQ=
Subject key identifier: 56:D7:8D:45:28:6F:CE:39:F4:50:1E:3E:85:7A:F3:41:60:A7:C1:74
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0199FC5896D1E7D965BC159808075D95BC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0D6F
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: 7EiYKhuRkyj01JbH2j/8dEwDNvpmj4CLIyEc4enU8+I=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:96:d1:e7:d9:65:bc:15:98:08:07:5d:95:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=56d78d45286fce39f4501e3e857af34160a7c174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:3a:03:a3:30:50:a5:6f:c8:09:2a:09:4f:
71:71:9e:f7:69:33:a4:ff:ec:21:ba:ff:97:d4:05:
d4:d7:1a:14:33:13:c6:37:93:47:85:66:43:a3:37:
45:27:8a:d0:52:b8:11:b3:78:1a:c8:ab:c4:ac:80:
9c:e5:e9:8f:49:3b:18:85:cd:c9:27:ff:0d:4a:c8:
27:98:bd:8b:db:4d:80:02:da:fb:84:95:c9:0c:b5:
1e:f8:46:bf:1d:3d:e2:29:16:b0:48:04:19:24:80:
37:98:08:ce:7c:ab:e4:08:73:49:e6:9c:09:61:b1:
12:e5:a2:18:0a:55:a3:f2:89:bf:90:a5:8c:58:41:
27:6c:70:66:de:2d:be:ed:7a:40:cb:bd:41:5d:f8:
1a:4a:22:96:89:d4:7a:bc:10:48:d3:db:8c:32:1a:
d1:e5:f2:b9:1b:95:ea:2c:e3:6f:51:3c:bd:50:2c:
69:e6:84:a7:f3:74:c8:60:de:48:96:c3:cf:a4:1d:
dc:04:06:ac:05:16:56:52:23:c2:be:e6:b4:d9:a9:
51:42:c7:e6:f8:b5:de:c0:7f:e0:03:1b:d7:17:d0:
12:24:df:03:7d:6e:6e:3f:40:07:f4:e0:92:3e:93:
69:df:0f:c7:19:2b:97:10:ad:ff:9a:72:37:0f:79:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:8D:45:28:6F:CE:39:F4:50:1E:3E:85:7A:F3:41:60:A7:C1:74
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:32:87:2d:22:fc:7c:ad:28:bf:0b:b8:a7:94:30:7e:5b:
8f:b6:b8:f7:9e:d2:2e:4e:1d:1a:eb:74:49:36:72:5c:2b:1c:
9a:66:a4:8e:fb:41:bf:75:b4:28:5d:9d:bf:e6:e8:e0:04:4b:
79:e6:7f:ad:c6:fc:c5:17:44:c1:7e:cc:4f:d8:1c:60:4b:a4:
b9:a9:d5:0d:ce:ba:55:53:00:4e:2d:5f:1c:e9:80:61:dd:36:
5a:5f:3d:0f:92:9a:08:52:19:d6:f9:e8:54:40:eb:65:01:90:
ba:9a:9f:e7:86:bf:e4:66:5f:55:b9:23:08:28:89:72:81:03:
8c:55:3b:4d:a7:48:76:0d:6f:a1:e6:85:f9:1e:cf:d4:80:be:
f3:f7:1c:73:be:0a:11:76:b6:2a:44:57:82:df:6c:71:f7:ab:
15:32:44:52:67:1a:e4:65:69:02:b7:22:f5:ba:78:64:35:dc:
f7:32:0f:3a:72:36:fd:a1:e4:5c:86:c5:f1:4e:b8:9e:47:be:
e9:ab:cf:f1:d1:23:0a:65:f5:ea:82:54:e9:35:4a:fd:bf:7c:
bd:d5:40:31:87:57:0d:68:dc:24:c4:7e:26:aa:30:e1:d3:84:
a2:6f:68:6f:24:7f:69:54:61:22:b8:26:fb:d5:a3:70:30:5f:
81:c6:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:45 2025 by rpki-client