Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier: G0aumM9Eqpa2kfBJ0/5iWaBcy2pq39N3eY4sHy5SWd8=
Subject key identifier: AA:8E:82:59:71:C8:55:D9:F5:DE:79:9A:EE:0B:02:12:A8:8E:98:87
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 0199FCC67A7829EE29E27B0D9E6B4EA7CC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number: 0594
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: 0lEY9zpi-7BkR5-cKklWMyBsLyM.roa (hash: FC6XHYclBVzH43tm1x5dwkNsn6Or/MOidVXMmwND+io=)
2: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: efBQn7weYBdg22D0F6vl2pcUr8F7t8h0lZsljq8hHSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7a:78:29:ee:29:e2:7b:0d:9e:6b:4e:a7:cc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=aa8e825971c855d9f5de799aee0b0212a88e9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:9c:68:50:b2:3d:1d:25:ee:e8:de:bc:7d:
e6:c2:2b:5f:9b:59:0b:93:e6:00:bc:de:aa:a5:35:
f0:61:de:de:ba:e1:51:13:24:6a:04:2c:3d:48:90:
07:97:4b:76:cf:25:2e:30:9d:91:ee:67:cb:fe:48:
85:d1:91:e7:c5:23:7f:86:78:64:f0:d6:04:72:36:
e3:9d:72:cf:57:6e:25:1a:a8:26:21:72:35:21:ec:
ce:d7:a4:f8:32:4d:77:da:b6:60:cd:fa:85:90:ad:
2c:9d:74:38:d6:f1:cb:01:68:d6:e1:a7:75:90:3c:
e3:9f:79:db:87:6b:cf:9f:d0:73:55:44:17:5f:3d:
25:92:d7:0b:32:07:c9:a5:a3:28:8a:7b:e0:31:83:
2b:55:e4:2d:7a:b3:f0:1d:58:1c:64:17:78:e4:92:
29:d6:ce:9a:3f:5f:be:1a:c4:59:95:bb:a6:02:4b:
1c:43:81:a7:e1:81:1a:be:90:ff:53:3d:a3:39:ba:
ef:78:2d:2d:69:13:34:27:17:c0:ba:3d:fb:8e:74:
d5:a9:fd:9f:02:94:0e:9e:90:0f:d9:58:a1:c9:f6:
8d:5c:a3:20:d1:88:c9:87:fa:25:52:d7:bc:8a:e3:
30:5c:e5:41:46:f5:60:16:9f:63:3f:50:23:0a:49:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:82:59:71:C8:55:D9:F5:DE:79:9A:EE:0B:02:12:A8:8E:98:87
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c5:0e:61:cf:39:57:cb:98:72:e2:2e:83:ca:52:b2:e0:a8:
22:48:fb:c5:56:ff:bc:2a:5b:f7:0b:79:bd:fa:96:d6:9d:16:
03:ff:10:bc:31:e1:45:ad:91:dc:b6:68:d0:fb:f6:72:76:65:
ea:a4:89:98:dd:97:7d:60:e5:55:8b:d7:24:26:a5:5a:0c:61:
87:0c:a2:d0:d9:be:95:43:4e:87:97:33:16:2f:03:79:82:bb:
cd:ef:e9:4f:e6:1f:28:9e:75:2d:52:0b:75:5c:b1:ef:a4:69:
ec:f7:e5:f5:15:65:e0:8d:62:8e:e6:0a:cf:76:c0:9d:9a:f1:
77:d3:17:83:7a:ae:64:8b:d5:1b:f8:72:85:51:fd:33:69:13:
e1:14:85:79:23:89:0d:7f:2a:7f:51:a5:49:45:f2:de:17:71:
02:04:60:46:de:b1:23:b3:eb:4d:19:54:25:d4:06:da:02:5b:
f8:e9:b5:c6:17:00:c0:b4:4d:86:04:d7:9d:a9:e3:7d:fe:70:
93:de:3c:60:48:37:71:5a:1a:27:04:4c:10:13:98:2b:50:67:
fd:b5:c5:b4:5d:51:15:3c:c9:79:ce:32:6e:63:2c:57:01:59:
d7:44:8c:4d:dd:e2:95:93:9a:ed:3a:00:c0:ef:2c:9c:0e:71:
75:10:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:42 2025 by rpki-client