Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: bRs0CQUfgljMQOuwjEXaGXUOxFqAdhKxlztPVAthdqc=
Subject key identifier: 69:CC:B4:FE:37:EF:04:31:EB:D2:E1:BB:5A:AC:C9:18:51:25:1C:BB
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 0199FAA0C4B7BF2FB739D6489921E5AA1AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0D23
Signing time: Sun 19 Oct 2025 04:01:04 +0000
Manifest this update: Sun 19 Oct 2025 04:01:04 +0000
Manifest next update: Mon 20 Oct 2025 04:01:04 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: vaXcxNA5VUCy522pSEZTz39Z6BhMynQlUGcrAWKssfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c4:b7:bf:2f:b7:39:d6:48:99:21:e5:aa:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Oct 19 04:01:04 2025 GMT
Not After : Oct 20 04:01:04 2025 GMT
Subject: CN=69ccb4fe37ef0431ebd2e1bb5aacc91851251cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:91:40:7f:8d:11:dd:b8:1c:4d:79:01:bb:
29:f3:25:74:1e:70:b8:b3:dd:70:53:4f:1f:9c:39:
1f:f0:5f:91:c7:ff:4c:e3:b2:bc:f9:92:73:f4:c4:
02:5c:7c:e0:df:a6:f0:a3:1f:64:f7:f2:e2:1d:b6:
58:77:7c:10:07:76:f0:cb:fe:c0:0e:7f:10:d6:83:
74:c6:cb:db:98:37:89:96:fc:fe:ae:f3:f5:e7:7e:
e2:eb:95:27:c3:69:1a:6e:e0:1d:2b:f7:7f:74:ce:
94:f0:5c:f2:83:2a:45:2d:0b:4e:dc:a4:f2:b4:dc:
b9:cb:3e:4d:03:57:72:6a:a9:a8:23:c3:72:e1:9d:
31:9c:3c:62:bf:e0:50:f2:bc:5f:35:48:62:2c:2f:
fa:ec:21:c0:f2:fa:04:e9:a7:aa:3c:6b:ea:4a:04:
4a:91:5b:d0:83:66:27:ee:b6:e6:e2:6d:92:d9:0b:
54:e5:55:80:bf:ec:41:76:cb:1c:aa:2c:63:82:d9:
8d:cb:1f:0b:1b:0f:db:de:55:bb:ae:80:03:1f:61:
fc:35:ae:29:84:bf:e3:31:47:4e:d6:14:a7:b3:28:
81:d3:9e:27:8c:15:02:3e:ab:a7:ec:3a:58:2e:e0:
e3:9e:34:58:f4:80:29:d5:a9:40:b0:a6:17:5f:02:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:B4:FE:37:EF:04:31:EB:D2:E1:BB:5A:AC:C9:18:51:25:1C:BB
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:12:16:f1:37:8c:0e:eb:5e:57:e8:49:3b:bb:38:c2:79:
fc:b0:bc:01:bc:e7:77:02:fe:d8:b4:d2:78:fd:85:26:2e:1a:
c6:2b:a3:76:d1:0c:fb:27:0a:a9:b6:2e:a0:65:8f:54:72:a1:
f7:96:46:57:98:a9:6d:f7:15:42:94:08:de:bc:d8:ed:72:fd:
8b:57:42:1b:fc:ed:e0:22:04:b0:d7:46:49:e7:ec:13:93:74:
37:92:ea:15:b0:d6:e4:c2:9d:bb:9f:19:cb:c4:33:31:84:c0:
e2:8e:e9:ee:31:a2:74:6e:dd:af:27:41:3f:ae:13:a9:fe:73:
36:05:d7:5f:8e:0d:bd:6d:56:4f:19:39:5b:aa:95:79:5f:40:
94:c9:9c:1f:ee:dd:38:48:18:a3:8e:94:d6:27:65:92:fa:33:
18:95:37:22:b0:42:31:f7:37:0c:88:10:96:3a:3b:e1:6e:f0:
c2:ec:c6:e6:cd:ef:b8:00:2b:65:a2:75:3e:79:2b:a8:b2:04:
bb:f4:77:77:64:09:d0:ae:a9:2d:d8:d7:a0:1c:b9:1e:18:69:
60:df:14:cc:bc:b8:47:72:a2:7c:23:bb:72:19:8c:53:ec:3d:
b0:96:e8:b6:ea:fb:a2:04:7a:17:5b:ff:c5:48:c6:6b:86:d3:
a1:a1:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:58 2025 by rpki-client