Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: Xsx24SvkzkTnx+KOtpnQpRFiSI+ZtGLNGGuro9LHUPg=
Subject key identifier: C3:F7:B0:98:3C:CA:20:3A:74:26:AE:00:E6:C2:90:EE:05:D2:56:55
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 0199FE7DD40346D41E51FB554E49C3ED549E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0DA2
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: urLMDdtML8k7j3vPZD5kWwrRJyq8kzAt+PCEgDirimc=)
2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d4:03:46:d4:1e:51:fb:55:4e:49:c3:ed:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=c3f7b0983cca203a7426ae00e6c290ee05d25655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:35:53:70:25:0b:35:f6:e1:f1:08:13:bc:
49:7a:ca:0d:80:eb:d1:97:5f:1f:45:b5:3d:ec:dc:
1e:0a:ed:7b:d0:e5:73:c7:48:73:89:6c:53:33:81:
ce:14:22:a8:44:1e:ce:bc:75:f3:e4:59:2d:ac:ec:
30:15:2c:ef:df:dc:fa:dd:36:03:12:b9:54:fd:09:
cc:c1:e8:e5:1c:73:b7:43:d6:66:9a:4f:61:3a:da:
64:21:90:63:0d:20:2d:c0:f0:4f:bb:0e:fb:9e:af:
f1:9e:f1:1a:7f:61:dc:6f:63:09:ae:0e:98:ad:7d:
f7:53:8c:4c:6c:93:c7:64:db:5e:75:40:c8:c1:db:
32:fb:d3:cb:dd:45:f4:52:2c:6c:8c:30:5a:02:ec:
e4:1d:9a:a5:a4:2b:99:b7:fa:46:28:1e:0e:66:40:
b1:d4:0c:4e:f9:be:2a:c9:29:52:af:cb:15:50:29:
64:86:16:86:db:9d:bc:9a:b4:9a:e2:1d:f8:df:a3:
6e:0e:8f:d6:68:90:0d:58:1d:48:65:cf:73:2c:b7:
03:61:02:e0:53:9e:48:18:48:36:c3:63:c2:9b:fc:
f3:9f:c0:21:28:cc:56:3b:58:03:4b:a2:7e:ed:e4:
b4:a9:7a:fc:40:87:79:5e:21:d5:8c:e6:83:d2:e9:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:B0:98:3C:CA:20:3A:74:26:AE:00:E6:C2:90:EE:05:D2:56:55
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:10:8f:82:25:4c:ca:96:b7:df:27:16:c3:e9:06:72:ed:
ba:15:a6:91:7f:7d:10:ba:44:93:c2:c8:e9:a3:e9:60:da:fe:
37:cd:dd:85:62:52:25:11:83:36:4d:b8:51:8e:1e:0d:5d:c7:
d6:6a:ba:d6:86:82:23:fa:df:95:34:25:a5:18:98:d9:15:f6:
01:33:2e:ba:48:1a:35:4e:ea:da:a2:67:d5:76:7b:7e:18:f1:
23:a1:12:69:6d:f0:92:7c:a9:4a:3e:d3:e9:9d:ad:65:54:65:
9c:19:13:d3:06:62:23:a9:c0:02:14:9e:b9:c5:15:bc:e6:7a:
11:ed:62:76:df:04:68:6d:86:5f:6a:29:17:f0:24:a4:04:69:
a2:08:ca:7d:5e:e3:f4:a2:77:bc:ae:90:0d:ae:81:48:57:39:
98:ee:b5:13:22:b0:10:cc:43:20:80:9e:32:d4:3e:fc:43:51:
eb:35:de:fe:e0:1f:71:6b:cc:f5:69:cf:23:a5:3a:06:53:3f:
8d:3e:f0:7e:c8:e0:40:bd:4a:6d:1f:ed:e9:ba:25:f5:57:9c:
cb:f7:34:09:53:7a:2c:f8:51:7b:73:ac:9c:bd:3c:67:57:3c:
41:58:81:00:1b:62:f6:32:88:bb:ba:8b:99:ed:68:f0:41:0d:
b7:c5:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:32 2025 by rpki-client