Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: dMc9fPtLaZOJKzdZL3hb7pqwNPQIWJm831V/dARQB8E=
Subject key identifier: 1D:65:D7:A2:F4:E3:88:02:CE:71:F9:E5:EA:4A:86:07:94:2A:C0:37
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 0199FCC6347C0C03C647748EDE926F00667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 078F
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: 3rNJKp5YLtg+1VORWQNFV9z3JGTd+PUD9FHvB9z0kD8=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:34:7c:0c:03:c6:47:74:8e:de:92:6f:00:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=1d65d7a2f4e38802ce71f9e5ea4a8607942ac037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:50:8d:51:bb:3b:a7:ed:d4:bc:de:a9:b9:
8c:d2:a1:02:1d:aa:25:05:12:5c:5e:e3:06:95:e6:
b1:ca:a1:56:6c:31:32:bd:ac:1f:fe:17:96:fa:ea:
84:f6:ed:86:d8:62:08:98:05:34:37:ce:6d:c1:18:
e0:d9:e5:96:27:1b:9b:b5:e5:53:a0:90:7c:fd:aa:
45:af:25:76:e4:83:42:f5:4a:26:99:f2:bc:12:2f:
78:12:1c:21:2d:d3:86:6c:d7:83:25:95:ad:6f:6c:
d5:c6:c2:af:17:38:82:c1:0c:4a:cd:83:df:e4:fa:
80:4d:87:c6:e4:a3:88:65:71:07:ed:c6:f4:70:d2:
ce:3b:9e:f6:9d:c4:c8:3e:16:ed:99:1b:f8:26:7f:
71:b0:6d:5a:21:56:32:e7:ca:ea:45:82:a1:5f:cc:
da:90:a2:d3:b6:a2:1a:b1:20:90:07:2b:f2:91:1b:
86:d9:26:46:92:a1:cb:19:19:35:48:a5:a5:2a:b8:
1d:8b:0f:a3:60:11:52:68:3c:9a:e2:22:53:af:00:
d8:df:28:33:23:48:1f:ba:38:c4:1f:47:52:d5:db:
f4:7c:29:f9:8a:08:8c:89:b1:84:a5:a3:a5:3e:11:
fa:37:97:a8:f5:a2:38:29:5b:31:e3:08:86:d1:72:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:D7:A2:F4:E3:88:02:CE:71:F9:E5:EA:4A:86:07:94:2A:C0:37
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:a3:6d:6c:7f:c0:13:a7:2d:04:2d:3e:0d:90:5b:b1:55:
95:c3:ec:f6:22:1e:ec:26:56:fb:3c:1e:68:de:dc:82:0a:68:
5d:05:11:e1:17:c7:da:62:10:52:b6:d3:ac:44:6d:72:7d:3f:
e3:0b:2d:77:09:2c:d6:7c:68:0d:dd:1b:bf:0a:64:d4:3c:89:
2e:d2:26:28:ea:cc:71:55:08:ff:08:cb:30:35:cd:2a:b6:0d:
32:be:44:7c:81:4c:c2:dc:dc:07:c8:05:d5:25:9b:5d:5b:a3:
85:3b:75:d5:3e:e9:6e:01:7f:a0:ec:24:a1:9e:9d:31:14:9e:
a5:c7:d8:b0:fa:e8:b4:8d:b2:3b:ce:6e:1d:92:fa:40:a1:69:
72:99:4a:f2:3e:68:89:ee:07:8d:1e:58:2e:f5:8a:ea:91:77:
f8:e5:3b:c2:ec:67:7c:d5:4f:92:fe:cf:be:af:77:19:bd:a5:
9c:19:df:de:62:94:5f:6d:a2:28:ca:49:bc:4f:63:7d:0b:f8:
23:ab:8c:0b:46:a1:9b:f8:e5:aa:5e:10:ab:8f:8c:a0:5b:57:
54:b6:c0:c1:a1:36:83:af:89:a0:a7:9f:54:05:5d:4e:1d:1f:
f8:6d:ac:25:bb:24:ff:c1:9e:f6:f2:42:23:da:46:46:a6:f6:
52:fa:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:42 2025 by rpki-client