Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: 8ndRe8fscLg7TxtvU+r+y+82uZrL9vzTTRpfNFoSWdc=
Subject key identifier: 65:8C:F1:6A:D2:14:E6:A2:B1:00:29:04:76:95:14:7B:0D:F4:99:5E
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 0199FD3467C0B8B3CD0F766E0D139D22EBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: DxT3OQwS10ZIfLvOD2/PbBrGnQz2hXDZ8CMrqNUVPNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:67:c0:b8:b3:cd:0f:76:6e:0d:13:9d:22:eb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=658cf16ad214e6a2b10029047695147b0df4995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:2e:96:dd:c1:14:05:c6:f2:05:c4:58:71:
b6:b1:a5:43:c4:f0:0f:92:2a:1b:c5:50:fa:d6:d5:
3a:bb:ba:b1:80:7f:61:55:0a:cd:f3:63:46:5d:ed:
21:34:60:30:a3:10:9a:bc:bc:c5:55:a4:ca:4d:2b:
ae:9c:94:69:b0:0a:66:4a:4e:f5:bf:0f:1d:6a:be:
ec:87:9b:c5:3a:a9:e5:0b:33:06:9d:a8:cf:17:80:
3d:b7:47:23:6b:7f:5f:26:b3:c6:1d:18:4b:7d:c1:
4a:8c:3c:47:84:96:cd:73:bd:45:2b:35:88:ac:c7:
01:81:53:27:77:11:b0:0d:e8:f2:f3:16:49:9e:c6:
60:40:d9:f6:9c:3b:5b:fe:60:76:06:fc:91:68:21:
5f:42:e4:6d:20:ca:68:de:2c:e2:8e:7d:b8:3b:23:
e9:8c:10:21:b5:3f:67:5a:8c:c3:79:8c:01:7f:04:
89:d3:78:77:c5:5d:68:6f:e8:e4:83:bd:9a:00:9d:
db:7b:2b:76:34:3c:98:1d:2d:e1:82:2c:70:eb:76:
22:7a:b8:d9:a9:17:2b:f7:cf:9a:06:74:7a:d6:43:
8b:88:1a:50:d8:f5:79:8b:dd:6a:28:bc:ad:96:02:
a0:52:ff:52:37:5e:47:69:fe:2e:0b:ba:ae:68:97:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:F1:6A:D2:14:E6:A2:B1:00:29:04:76:95:14:7B:0D:F4:99:5E
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:ea:25:43:97:91:98:0d:8c:c9:1f:50:38:70:cc:75:0b:
04:cc:7a:f1:15:55:ab:75:41:00:01:5c:8a:0b:e2:c6:16:98:
0b:bb:81:04:91:40:d9:00:52:d7:d5:ad:0e:72:1d:12:e3:6f:
00:84:84:f2:b6:b1:d9:ce:4f:bc:5c:d9:75:a9:9c:ee:5b:ed:
12:c4:92:ad:c4:6f:5d:ff:71:4c:1d:ef:ea:4e:e3:9f:f2:5f:
94:be:10:cb:46:db:c5:13:5f:05:fe:82:86:32:35:9d:4f:f6:
cd:87:01:0e:da:f2:fe:6d:31:41:dd:32:bf:56:d1:4d:1e:d8:
ca:cf:c6:f8:d9:44:77:d8:ac:02:97:dc:2c:bf:b8:ab:7e:0b:
d1:d1:73:9c:c5:7f:fe:49:57:4d:5a:db:e1:82:f0:57:5e:bc:
47:db:bc:a2:7f:56:ca:ab:d9:21:24:c1:9c:93:2a:0f:6d:e8:
04:c4:43:d7:09:c2:2d:fc:0b:cc:d7:da:7b:56:40:04:64:76:
11:90:09:77:65:9f:a2:76:f5:cb:ce:02:7a:78:00:d9:48:f2:
f8:2a:bd:cf:99:e7:74:1a:1d:84:fa:74:a5:d8:b7:ef:99:07:
b8:46:23:e8:c1:9d:ef:86:3a:10:bd:e9:9b:95:b4:27:ec:dd:
e9:44:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:35 2025 by rpki-client