Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: m6PdiU9MsndQ74WXlwMcC7nEo56uE8wimB1AFZsK1gk=
Subject key identifier: CF:02:94:C4:65:4E:FC:8E:80:49:3C:DF:29:2E:2B:20:2A:BE:5E:55
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 0199FC21538126BDEBCE866129671F0A134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: v/I9tI2nw4CeYcy0IHYPA6ZK11oyHNBd8wJpvf8h58c=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:53:81:26:bd:eb:ce:86:61:29:67:1f:0a:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=cf0294c4654efc8e80493cdf292e2b202abe5e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:2e:4b:8f:ba:4c:a5:3d:07:ee:9a:6f:9a:
09:50:95:8d:de:3e:eb:c1:51:dd:41:2d:77:2d:3b:
f8:8f:0e:c9:e0:0d:e1:4e:c0:5f:09:c7:62:2e:97:
8b:c8:48:e7:56:04:07:d9:4c:c7:27:4b:69:c2:da:
a9:54:9f:66:0d:1a:41:67:d1:ac:71:6a:fc:1d:c9:
ae:c3:48:86:e6:60:df:d1:fc:71:25:4d:1b:4f:17:
78:0f:6c:c0:56:1b:64:c2:f3:dd:f6:3c:44:e5:ca:
d7:a0:13:0a:fd:b9:29:4c:a5:55:ca:4f:80:8f:89:
00:2e:37:e2:69:7a:3e:b7:b2:cc:a9:da:5b:e5:bb:
bd:fb:bb:7f:91:6f:b7:1a:3a:88:64:28:dc:b8:ca:
7b:a4:33:76:ee:aa:97:45:e9:f5:58:9c:6e:e6:db:
7a:c3:a0:11:99:85:80:e3:60:6e:bc:52:8a:7a:60:
31:3b:1e:24:bd:53:36:69:6d:70:e3:23:40:26:7e:
be:51:19:45:90:27:a6:92:1b:ef:2c:c2:bc:6e:8f:
06:68:69:26:d7:f3:9b:7d:12:a0:50:85:94:89:b3:
24:51:dd:29:16:b1:1a:5b:d7:1d:87:45:f3:5e:df:
c0:59:5e:2d:3d:c2:1e:fe:8c:7e:9d:aa:d2:5b:fa:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:94:C4:65:4E:FC:8E:80:49:3C:DF:29:2E:2B:20:2A:BE:5E:55
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:b6:c1:d0:d4:d7:83:63:ea:b5:24:fd:35:7c:f2:3d:70:
fc:a2:e3:e3:af:12:1b:76:a5:d2:6f:4a:43:f8:9f:e1:87:fc:
11:19:f3:ea:5a:e8:e1:0f:09:59:49:b6:46:31:88:56:81:6f:
98:be:49:98:fd:86:71:dc:b4:b6:57:17:2a:c6:7d:20:c8:4e:
e8:18:68:0b:31:c8:e4:28:d6:c4:67:98:8a:c1:ae:10:67:1d:
8b:e2:ae:aa:f5:09:49:97:e8:53:4d:79:2b:e8:9b:f6:d8:ba:
ba:fe:e7:6f:10:60:5e:10:f4:b4:d1:af:e2:9c:b2:38:64:ed:
22:15:1b:c3:bf:6c:22:a6:ff:f5:4b:0a:40:c2:3e:c8:55:d2:
d6:0a:43:c0:aa:38:16:73:56:78:6f:a2:78:3e:75:d6:e2:22:
70:24:47:1f:26:91:20:c3:91:24:60:0e:3b:61:ef:25:18:de:
f5:c4:6f:98:cd:40:a1:57:80:b8:e8:4d:24:dd:05:57:d9:7a:
21:ec:f4:33:84:ba:9f:0a:29:19:4d:8e:22:c9:1e:c1:95:3c:
fe:0c:b3:9c:cb:17:99:a6:fb:17:0b:13:89:4a:3b:b8:5c:fe:
df:20:4f:9d:2f:5a:f8:00:e2:4b:ca:73:db:20:79:eb:46:a2:
b9:a0:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:00 2025 by rpki-client