Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: A3TUxMgZj6BBxM3xhxcfvWsizK+HTGtHohBTQr1Y+v8=
Subject key identifier: DA:E0:6A:10:B3:EB:8C:C0:59:A2:6F:5B:78:2E:BE:53:F3:41:1B:41
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0199FEB48CF11B596B7C8BD3256827158933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 1380
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: ppgyIQYy4lHiecX7PA8CAvk+Sdj6qcskjFBDLqRQN68=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8c:f1:1b:59:6b:7c:8b:d3:25:68:27:15:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=dae06a10b3eb8cc059a26f5b782ebe53f3411b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:86:16:07:f9:67:e1:f8:e6:bf:8d:2a:e0:
27:c0:12:d7:7d:56:00:52:a3:32:67:60:a8:79:30:
8d:86:90:e7:0f:35:1e:fe:e6:4d:e6:76:c0:84:22:
90:36:d6:d7:b9:7b:9f:ca:fa:3e:70:cd:3d:cc:bf:
b3:69:86:4b:b0:f1:25:85:e8:ad:82:56:88:3f:2c:
74:17:fe:33:eb:a1:69:28:47:7e:f9:1b:60:b5:2f:
d1:6e:c0:9b:fe:5d:9d:56:2e:22:57:3a:2a:82:0e:
69:3f:5a:21:0e:56:01:5e:a7:8e:a5:4d:1a:6f:46:
52:aa:97:f4:f4:9a:86:30:41:31:28:a6:74:86:04:
df:e1:b1:94:0a:e1:56:0a:16:32:77:b1:be:af:4c:
0a:35:47:f0:aa:80:21:f1:0d:e8:00:77:4d:ac:dd:
44:36:0a:fd:7d:42:3e:48:e1:02:ee:4c:00:12:87:
e0:47:14:6b:80:32:94:1b:64:10:31:cd:9f:56:af:
f5:39:2a:b3:f0:4a:34:b4:93:ca:2f:c7:d9:e4:8c:
32:17:84:49:95:b7:62:d4:19:6b:65:6c:90:a1:4c:
8f:ed:f6:2a:bf:1c:02:d3:d8:d6:af:88:f8:a8:f3:
19:39:80:13:13:7c:e7:38:21:6b:57:1b:f5:45:49:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:6A:10:B3:EB:8C:C0:59:A2:6F:5B:78:2E:BE:53:F3:41:1B:41
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d1:31:4f:81:bc:71:00:3f:03:d7:7a:6a:f5:ed:6f:d8:24:
a9:da:cf:2c:78:57:4a:8e:d0:61:51:d9:e9:23:93:54:59:b2:
72:cc:42:42:2b:71:d8:b9:08:a1:a2:57:ae:8f:28:3f:99:eb:
73:04:db:ad:2c:b2:dd:01:47:6c:36:f6:be:75:f7:ff:58:c9:
90:c8:a5:f2:38:c1:c3:74:29:95:5a:f1:1a:27:d1:67:71:d4:
6d:15:29:55:4c:4b:40:cb:52:4d:94:1a:67:7a:95:1d:03:93:
6c:6d:a7:95:34:91:77:5e:03:78:a3:48:0a:06:b4:8b:f3:32:
57:98:0f:50:36:0d:4c:12:65:12:7c:79:9d:0e:0d:cc:c3:77:
0e:8d:4d:89:88:21:79:f3:e3:09:4b:f4:72:78:b6:8e:4c:31:
43:2e:95:0f:0c:f6:d6:f0:f1:87:de:0a:0a:60:c7:2e:0a:4e:
b9:29:e4:ac:45:4f:fa:3c:05:0d:eb:ad:c2:45:28:14:eb:28:
23:2f:e4:a9:4b:8d:dc:ac:02:35:fd:85:a2:d7:7c:d4:71:46:
f9:f2:aa:fc:6b:ac:1f:26:2d:6b:be:ca:6f:a9:80:e0:f6:cb:
8b:1c:9c:72:a4:a1:f7:c5:51:75:0e:2b:64:bb:54:01:52:36:
16:4e:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:54 2025 by rpki-client