Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: inb76lGaZQAToXvBANtY3uJ4VshDNt3X1nrharJ+Jhw=
Subject key identifier: 90:0C:E3:B6:EB:89:53:18:1D:E4:AA:D9:1B:F2:9E:F5:36:ED:AD:35
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 0199FE0FE439A0E2818ADE926AD53F9D9532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0CE1
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: pFeiPPp5ok0Sw38eBIfFTIoqrSH4jDDbY6I9gkbS0fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e4:39:a0:e2:81:8a:de:92:6a:d5:3f:9d:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=900ce3b6eb8953181de4aad91bf29ef536edad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:ab:2b:3a:6e:b8:2c:27:47:4a:16:fb:fc:
70:90:72:89:80:e1:ea:9f:75:1e:e5:df:9f:b2:dc:
5a:9a:c9:6e:b7:07:e3:17:39:6b:3b:bb:f9:63:84:
0a:3e:f3:80:15:da:67:3d:00:90:95:b5:2e:bc:d1:
8e:c5:8e:d9:9e:30:16:51:cf:a5:ab:b4:c0:12:34:
5d:84:cb:13:c9:28:00:63:48:85:27:22:0e:9a:82:
0d:69:7a:8b:90:cd:e5:af:2a:6d:33:26:26:93:4c:
60:58:af:16:1b:3b:7b:92:1f:ee:14:07:63:30:90:
fe:8b:bc:70:b9:cd:9e:fb:f1:94:45:c6:ff:72:9f:
0a:60:e1:c3:30:50:9c:be:53:75:44:37:2a:b8:2d:
83:13:d0:9b:bd:81:6f:cd:2f:04:93:74:19:06:33:
32:4d:41:ac:78:4b:4c:62:ec:76:eb:25:0e:87:fb:
eb:00:58:90:3e:9f:05:06:34:05:6c:99:ba:75:f2:
19:18:99:39:5c:98:f9:85:f4:2e:7b:7e:b7:13:c6:
22:4f:d4:25:0e:4a:39:33:5a:81:1b:4c:c4:2a:6c:
de:81:6f:ca:42:6c:98:23:bd:5c:d3:7f:a6:7d:a1:
dd:a9:64:5b:4d:ca:c8:97:d3:8d:a3:2a:1b:dd:c1:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:E3:B6:EB:89:53:18:1D:E4:AA:D9:1B:F2:9E:F5:36:ED:AD:35
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9b:8a:0f:71:0c:9f:67:d7:64:98:92:b3:cb:13:e9:3f:d3:
cc:0c:f8:4e:95:9d:7c:8f:55:cb:7f:aa:ff:15:ea:bc:15:f2:
54:a0:37:0d:00:0b:59:4b:6c:c1:b8:0d:62:84:ae:44:c8:f6:
e6:11:ab:96:ff:b9:6f:2e:ac:60:75:b9:81:5f:91:9c:0c:a5:
21:dd:3a:67:8b:e6:24:7f:12:e3:f9:32:06:db:53:ff:e8:4a:
2f:a0:81:35:b1:d9:54:de:53:8c:b8:8d:1d:37:64:d9:9c:5e:
bf:d2:2a:3b:e1:ad:cf:d5:cb:68:18:b0:2a:fa:d6:31:57:86:
cd:df:ef:9a:6d:2b:cb:ad:51:5b:0e:a9:e3:c0:df:de:1b:c6:
12:ac:9d:35:33:bb:29:47:85:ac:56:56:46:c6:63:d6:0e:14:
cf:74:37:37:65:c7:a5:93:68:59:b6:ab:fe:a5:44:05:34:82:
f8:96:60:b2:18:76:0b:70:14:f3:5d:0d:16:13:ec:f8:5d:a6:
b1:83:d6:5f:15:26:cd:22:40:cb:cd:ba:93:44:7b:da:90:36:
06:f8:6b:25:cb:e0:15:65:e9:3f:5a:13:cf:c9:fa:20:5f:90:
57:99:4d:6e:3c:f5:d5:84:15:53:83:67:b0:05:f5:99:04:c0:
8d:9a:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:58 2025 by rpki-client