Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: srXN4r4WcA8Sfhm7GKIW9hON+cXpPEvD46EKn1Jo5l8=
Subject key identifier: 5C:67:08:53:29:D9:9B:7F:C7:1B:B9:1D:55:5B:1E:CB:2D:7C:F4:18
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019A036C0DA0D4FA2006B7932435E3D70A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 21:00:04 +0000
Manifest this update: Mon 20 Oct 2025 21:00:04 +0000
Manifest next update: Tue 21 Oct 2025 21:00:04 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: +GbSR7IafYx3h/NOP4vSbF9eR+HJTr8dPyq8hsIyhn0=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 21:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:6c:0d:a0:d4:fa:20:06:b7:93:24:35:e3:d7:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Oct 20 21:00:04 2025 GMT
Not After : Oct 21 21:00:04 2025 GMT
Subject: CN=5c67085329d99b7fc71bb91d555b1ecb2d7cf418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:af:da:1d:76:e2:63:c6:1a:aa:2b:8f:6a:
aa:c4:5d:7d:16:60:2c:18:66:7c:ba:98:54:20:7e:
a0:d4:6a:13:b6:f4:55:16:53:2b:7d:64:e5:dc:fc:
64:12:f9:42:71:18:09:a7:d5:4e:c2:fb:99:86:2a:
54:bf:18:6e:4e:30:11:ac:3a:7f:97:5e:44:ee:70:
25:d6:55:7f:28:d9:19:a0:d1:72:55:33:e3:69:7f:
a9:85:c5:4e:f7:aa:dc:c8:f3:04:fa:56:1a:b0:1f:
e8:25:0f:e5:cd:a5:e8:cc:59:19:5c:47:b2:f8:14:
cf:9b:e4:06:c7:57:59:51:33:7b:f5:41:8d:a7:a6:
3b:c2:d7:99:33:29:fb:f6:dc:53:e3:9f:1a:60:4d:
88:d1:ed:e4:70:54:61:d8:f9:70:d2:86:7f:25:be:
6d:b3:28:74:e5:34:05:59:38:52:70:0e:ed:ac:a3:
e5:a9:98:16:0f:09:6d:e1:dc:37:70:6b:3c:0c:7d:
36:ce:46:55:97:1a:1f:11:b3:7a:f8:58:61:17:1e:
48:2b:8e:42:32:3c:93:cf:cb:77:dc:4a:a1:44:ae:
45:94:52:5f:97:81:26:2b:70:49:16:50:5b:90:17:
a0:01:51:28:b4:38:ad:48:0d:11:f4:a8:34:cd:de:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:08:53:29:D9:9B:7F:C7:1B:B9:1D:55:5B:1E:CB:2D:7C:F4:18
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:c5:29:08:c8:f7:71:d6:e8:e7:28:95:a2:fd:8b:6b:43:
36:76:29:b1:76:c6:f1:0d:6c:2f:ed:7f:2f:23:d1:eb:22:31:
ba:e1:14:1b:54:1b:9e:13:3c:71:ca:74:fb:95:46:5f:9a:5d:
77:b5:7f:2d:a5:81:4b:f7:a7:a7:a8:1f:15:9f:b8:20:01:0c:
4e:bc:fa:93:76:61:60:26:75:66:ce:24:63:e8:4d:45:a8:ab:
a4:3d:2c:1f:33:4c:d9:ca:5f:a6:d6:7a:fd:dd:40:cd:0c:d8:
06:30:ea:da:bb:b6:7e:89:c3:5f:fe:1a:b6:c0:b2:90:b1:0f:
97:93:32:86:4e:06:2f:61:96:10:29:48:a3:6b:e5:91:cd:8e:
26:43:a3:e3:7d:4f:7a:93:77:77:24:53:24:9a:c6:80:b5:26:
1c:1b:63:a5:b3:13:2f:8d:ca:27:fc:00:a7:5e:d2:ac:74:ca:
2c:16:ac:2b:84:af:73:33:66:68:fa:06:77:27:80:cb:cc:cc:
a6:21:f9:f1:9b:78:a9:62:50:f2:9e:83:9d:e8:bc:e7:ee:56:
b2:ae:46:4a:7b:cc:33:40:3a:7f:51:01:56:15:71:d1:a0:c0:
50:ee:00:14:1a:2f:e4:d5:03:1a:4d:a9:13:76:f0:3c:ad:5a:
eb:76:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:53:27 2025 by rpki-client