Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: ZAa2uvPTuV9yUjVlXhKG8+DWtqGEylnZ3/J3TxNvIWI=
Subject key identifier: 4A:CF:94:32:69:4A:35:9C:82:9C:A7:60:52:E4:4F:D1:69:4E:D6:F6
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 0199FC2158F50581C06081B0D29D1A22AC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 06E3
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: R/93+pAGuyOQX58/TNGuXvO9aWggTRaCnN6CovWf8Gc=)
2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:f5:05:81:c0:60:81:b0:d2:9d:1a:22:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=4acf9432694a359c829ca76052e44fd1694ed6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:42:e6:82:9c:b0:c6:ab:55:f6:22:cc:7a:
88:8e:f5:1b:f4:df:b4:63:b5:df:96:20:d9:37:ae:
00:c6:50:90:7e:bd:ba:40:c1:d2:af:c9:38:e0:a4:
ce:39:cd:4e:d0:bd:c4:50:de:eb:41:42:13:ac:22:
69:f7:d5:74:dc:36:66:dd:08:ac:5a:f1:da:12:bb:
6d:48:62:45:e3:7e:20:12:3d:6b:e5:32:64:c7:bd:
ef:df:7c:1e:fa:7a:db:aa:28:43:db:91:e4:b8:9f:
0d:da:08:39:3d:4b:83:3c:33:7d:98:3f:8a:e6:23:
70:aa:a9:79:94:5a:a6:f6:d2:4d:17:78:46:35:b2:
0c:7f:4c:85:24:0a:d8:73:64:e8:ab:0f:7c:26:56:
4e:ea:56:33:c3:b3:1f:09:3e:b2:29:d4:e6:a8:76:
8d:9f:5d:38:78:35:14:57:f0:9b:a4:5a:8a:4c:28:
c5:d6:5d:e1:4f:f9:39:74:77:b8:ad:19:a9:74:3a:
18:43:9b:8b:a4:eb:05:c3:42:15:1a:8c:48:c7:c4:
34:34:a4:20:67:ca:8f:b7:71:d0:e3:db:a2:2f:08:
6a:e8:76:14:a9:40:4d:d6:86:80:ab:b5:1c:0e:4a:
98:f6:89:68:14:d4:08:be:48:ef:1f:c5:2f:05:5a:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:94:32:69:4A:35:9C:82:9C:A7:60:52:E4:4F:D1:69:4E:D6:F6
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:8b:2b:79:4a:0b:5a:c4:94:94:5e:2c:49:ef:69:f4:30:
78:b7:7b:a2:38:e2:6e:7c:42:f7:bf:64:6f:e4:93:07:78:78:
19:7a:72:d0:6b:7b:6e:6e:62:33:27:f5:13:9b:87:b3:4a:2e:
2a:aa:83:22:31:d6:49:8c:4b:b5:f7:9c:87:5a:c6:15:b2:0c:
5b:67:94:5c:1e:ab:01:65:41:10:44:72:f6:62:20:a5:88:00:
9d:c3:48:0b:0d:19:50:6b:eb:3b:0b:19:e7:d8:d0:00:fd:c7:
a1:6b:6e:14:85:31:16:50:a6:4b:3f:8f:65:3e:17:7d:71:92:
d1:6a:8d:5d:dd:f1:c8:73:9e:86:83:34:cc:55:95:46:87:58:
b9:e6:cf:f9:0f:e8:62:0b:33:d9:5f:25:5f:86:51:69:63:21:
7c:13:03:2b:e5:9d:00:20:df:3d:7c:f4:d2:b5:f8:88:64:56:
b4:01:10:44:a2:2c:17:f3:45:24:68:ed:80:75:dc:92:9c:28:
e8:91:0e:b6:c3:29:6a:cc:f9:b4:c4:5f:c6:de:ce:5e:4d:40:
1a:88:67:bd:91:8f:49:b7:c0:93:a8:1b:43:ac:c6:90:83:94:
ec:a1:31:3c:b9:0e:dc:4f:1d:ab:c5:9c:af:34:78:0f:c6:a4:
cc:fa:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:11 2025 by rpki-client