Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: HCSPlMNM1QhhYphYJWjHNie98JrE4QWFHLupppW5SQc=
Subject key identifier: C4:58:6A:E2:B5:FF:D9:00:4B:3A:9C:6A:93:DB:C8:E3:1A:B5:AE:F4
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0199FF2301B467C424F606C2399C0C27A4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1390
Signing time: Mon 20 Oct 2025 01:01:48 +0000
Manifest this update: Mon 20 Oct 2025 01:01:48 +0000
Manifest next update: Tue 21 Oct 2025 01:01:48 +0000
Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=)
2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 648AxjXsPEELChRWARHZEp34qZIflTMjJr4ItqXsW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:01:b4:67:c4:24:f6:06:c2:39:9c:0c:27:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Oct 20 01:01:48 2025 GMT
Not After : Oct 21 01:01:48 2025 GMT
Subject: CN=c4586ae2b5ffd9004b3a9c6a93dbc8e31ab5aef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:14:a5:60:2a:7a:b0:f3:38:56:e8:5f:d1:
ce:24:e2:f4:f1:a6:45:46:37:10:7f:33:8b:04:fd:
38:6a:1e:1f:4a:76:f4:a5:c8:94:b3:18:d6:be:79:
94:a4:4e:ae:03:8c:1e:c8:12:01:51:64:0b:c7:fb:
b6:d9:ee:57:43:2e:24:a7:7d:63:84:38:f5:b7:b3:
38:3c:4d:c1:07:e3:20:58:5f:52:9e:37:8a:32:32:
18:ea:68:00:05:fc:c9:ab:4a:69:95:4d:56:6a:f7:
48:d4:09:0f:b6:02:a2:f2:db:45:64:b0:70:04:4c:
35:77:b2:6e:00:04:bb:b0:51:25:82:b4:5c:8d:b4:
cc:fd:da:4b:99:a2:11:f0:53:90:01:fb:42:a6:26:
9e:3d:08:4a:3e:1c:93:f8:32:a1:e1:a7:ca:56:a6:
5a:07:de:ad:28:71:78:48:03:3e:a6:97:19:9b:9a:
e6:24:51:5e:9f:cb:5e:08:24:71:37:49:a4:62:db:
18:07:9c:eb:17:7d:de:36:09:46:aa:8e:d6:2e:6a:
2b:cb:7d:b8:08:51:30:2e:7e:39:8f:ae:dc:b7:50:
44:be:28:9a:7a:7e:4f:1f:a8:3e:8c:8c:51:9e:90:
e7:9f:5b:eb:0f:3e:25:12:1b:54:e4:2c:bf:08:03:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:6A:E2:B5:FF:D9:00:4B:3A:9C:6A:93:DB:C8:E3:1A:B5:AE:F4
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cd:6b:aa:02:62:32:7a:7e:3a:23:d0:03:4f:74:24:ee:37:
d5:57:c2:72:13:51:a5:d7:8e:22:3e:16:dd:2f:48:b1:ec:ea:
6b:3a:d4:41:d7:57:95:5d:69:8c:cc:74:34:76:64:88:31:d1:
d1:86:cb:64:11:ad:ac:c5:b4:9a:0a:42:42:d5:fe:67:c5:0a:
c2:eb:3d:77:5f:c8:47:19:96:d4:92:5f:57:7d:81:9a:72:43:
b1:77:72:65:f8:d7:01:7a:93:31:0f:45:b2:27:37:58:ba:78:
31:2a:7a:c0:5b:2d:43:d5:25:2c:77:4b:d5:9c:42:ae:8e:a5:
2e:aa:61:92:50:1f:6a:e4:f9:62:bc:c9:06:8f:f6:c4:8a:b2:
05:28:fb:a0:d8:01:0b:13:3b:6b:03:14:a5:ae:24:3f:1b:b5:
74:c5:9f:02:a4:84:15:a2:d8:79:51:92:89:ad:27:ef:13:ae:
53:39:58:a3:a8:ed:b8:1e:b7:0a:d0:b2:9c:fa:f3:ce:45:8e:
a6:c5:3a:a7:d4:3a:83:57:ef:74:c8:2a:a0:6b:48:42:b2:ec:
22:c3:f3:26:d3:95:f4:d0:e7:05:92:fb:fb:6d:1d:b5:6c:5a:
8b:f3:44:2a:f8:05:3a:b8:b7:b6:9c:56:54:1b:37:8d:7d:e6:
32:7e:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:59 2025 by rpki-client