Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: GnFv4skMhT8Q+TFOhwK7XLwDuqknb6f3EAVO7rFu+os=
Subject key identifier: 10:CE:26:13:CE:DF:65:7A:84:A7:9E:85:3D:A3:AF:8C:85:47:17:A7
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 0199FC5841A7DCEC7344201C6084C5B31E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 022E
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: Zc/3EOT8xurXJR67VKQkj97QJ8EQLeNZVvfh+Tt800E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:41:a7:dc:ec:73:44:20:1c:60:84:c5:b3:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=10ce2613cedf657a84a79e853da3af8c854717a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:59:94:5e:ab:3e:60:54:ae:3a:ec:a3:16:
3d:e3:5f:85:03:58:0d:f1:7d:18:1b:c4:54:a9:9b:
27:da:f9:ff:58:40:1d:71:18:67:ae:3c:8f:e4:69:
65:2d:1c:e2:1e:93:62:9a:b8:d3:8b:e4:42:7d:97:
c2:12:ba:55:90:6e:68:de:15:fe:34:0d:a1:62:cb:
f8:68:ab:6d:a7:68:49:b7:02:89:41:8a:47:ae:e1:
2d:fb:da:e5:cb:81:01:52:f9:63:2d:29:1f:84:9e:
71:60:57:9b:b0:22:f4:24:ce:ea:a1:f0:8d:a6:6e:
b9:e8:e7:bf:c0:68:a2:c8:5d:9f:c4:de:7d:dc:6e:
0b:cd:3f:bb:bc:ca:b8:23:ef:26:e1:fa:c8:7e:fd:
cd:8d:a8:c5:79:b4:c8:73:21:e2:54:d5:fb:a0:01:
a2:8a:ad:1c:a0:ec:6a:a0:5c:e6:25:be:0a:e2:5e:
59:ef:69:1b:51:68:38:d3:cd:bf:b1:f3:78:8e:19:
a0:3e:18:83:46:9f:e6:f7:e6:10:d5:35:cf:46:9a:
f0:55:cd:d9:28:c9:33:01:c5:f2:dc:d2:e3:ac:80:
d8:6e:7f:b0:6d:b1:05:5e:ae:3d:84:9e:52:6c:e9:
3a:bd:81:d1:aa:66:58:c6:76:3c:06:7c:24:4a:ff:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:26:13:CE:DF:65:7A:84:A7:9E:85:3D:A3:AF:8C:85:47:17:A7
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a9:fd:ff:c0:79:e7:30:4f:9c:75:da:5f:0d:16:fd:f5:94:
cc:07:12:e5:cb:a6:08:15:83:1a:e5:b3:69:b3:4e:38:fa:37:
d2:c1:f3:a5:2d:a9:04:09:82:94:6b:79:4c:3c:ef:e8:30:3b:
96:a4:fb:c9:30:c7:91:a3:ce:c0:5c:d9:b8:02:5c:e9:02:56:
04:62:1a:97:0c:36:46:f5:04:19:ee:67:5b:ae:39:46:77:26:
de:9e:c7:59:a3:41:d1:73:3b:9a:9a:a9:25:9d:5c:19:67:63:
78:bd:08:76:4c:5f:f4:47:15:8b:80:7f:b8:64:53:45:b4:98:
e1:4b:71:65:2b:3a:a4:61:9b:54:4e:95:73:5c:71:13:67:0e:
57:69:32:92:9f:da:6b:fd:dc:11:a6:e8:e9:bc:3f:d3:f1:11:
8b:bc:8d:dd:7e:6c:9c:b1:d4:e5:f3:09:ea:cf:a9:65:65:f0:
8a:53:17:f3:70:6c:6b:44:17:2d:41:e5:87:a4:9d:e9:27:fa:
9f:34:67:0f:a4:e3:55:7b:b3:6d:c2:81:19:c0:9c:ff:68:00:
60:68:48:ea:3e:ee:b5:39:90:e2:40:70:35:0d:3a:03:10:bb:
8b:36:c6:90:b8:83:31:ca:30:97:82:2a:92:b3:36:e9:eb:c8:
1b:da:25:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client