Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: qipEdq1XX0FgVOzPhWv9S6BANJWF05vZ1hWaOJzvr6c=
Subject key identifier: F7:F3:0F:1C:C0:CC:FF:48:DA:DE:70:DF:B4:B0:1F:4A:03:FD:32:C3
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019A0111044B0B948BB4DC2E626377DDDCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 10:01:23 +0000
Manifest this update: Mon 20 Oct 2025 10:01:23 +0000
Manifest next update: Tue 21 Oct 2025 10:01:23 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: QU2A5aMDFE6IOfZc+2JLzUXnpJGDndEaZBKOr1X+8d8=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:04:4b:0b:94:8b:b4:dc:2e:62:63:77:dd:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Oct 20 10:01:23 2025 GMT
Not After : Oct 21 10:01:23 2025 GMT
Subject: CN=f7f30f1cc0ccff48dade70dfb4b01f4a03fd32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:5b:dc:8f:7e:9b:96:d1:8b:5e:78:45:9d:
1d:04:bc:89:fa:bf:cb:8a:e2:09:39:99:98:5f:8a:
e1:37:40:8d:fc:88:b3:d5:05:95:46:01:dd:54:7d:
2c:3b:c7:a5:ab:4b:4d:ff:7e:68:33:45:b0:a2:85:
ff:f2:cf:3b:dd:39:03:8d:5c:a0:04:d6:43:fe:41:
45:da:73:a0:7d:fc:4b:dc:eb:54:8e:5d:52:23:79:
12:58:a8:f4:b1:9f:67:6a:7b:15:32:4b:e7:a4:47:
b6:d9:e2:c8:8a:d1:6b:9d:dc:02:77:96:e0:52:0f:
e0:04:05:4e:e5:67:df:64:9f:d2:7c:2f:1a:c1:3e:
cf:c8:88:b8:84:67:76:22:ef:14:01:1e:d8:b5:25:
47:d9:6c:02:b5:e7:a9:24:22:7e:68:41:36:1a:b7:
12:88:29:14:b8:96:48:2b:41:73:96:fb:cd:de:b5:
68:be:e8:c0:e0:1e:e7:10:40:74:a5:42:09:66:99:
78:e1:94:83:db:da:fa:16:55:6b:28:09:f9:e1:3f:
ea:e6:da:e9:1c:64:96:e6:7b:a8:97:37:0f:36:17:
3c:d9:26:fa:ff:89:f8:87:63:d2:71:93:25:ba:7c:
7b:67:36:15:93:b4:c2:da:78:63:37:1b:29:33:43:
92:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:0F:1C:C0:CC:FF:48:DA:DE:70:DF:B4:B0:1F:4A:03:FD:32:C3
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:cb:28:1c:64:e4:45:1d:7d:4d:97:ea:92:2a:0a:26:86:
79:39:c2:5f:5f:b6:de:5c:28:53:2d:72:16:a7:d1:d9:21:83:
58:55:57:f8:b1:8c:2a:6e:33:74:4e:f9:0d:87:e7:0b:96:bb:
48:03:49:0d:d3:73:1a:bf:47:74:bc:1b:39:40:8d:4a:92:f8:
fe:94:20:85:b2:d6:1c:a2:69:b9:00:6a:86:f1:73:67:d2:8d:
a5:58:57:6e:34:79:ff:94:6a:74:d8:ce:da:16:c8:3e:b1:6e:
11:7e:e3:0e:7e:8a:f7:2a:a7:8c:63:5c:d2:62:2f:1e:1f:39:
47:87:0d:5f:bf:14:b3:38:9e:1e:84:a7:7f:68:17:dd:23:89:
a7:35:87:b5:8e:ab:38:b6:a1:36:2b:66:82:d7:85:56:11:ac:
79:df:ec:98:74:de:39:c0:a8:ae:3d:66:d8:72:bd:f6:ac:57:
56:a4:17:b3:0e:02:e2:41:38:16:9f:e8:84:ee:f9:e4:ab:69:
f6:05:5d:a9:bb:38:5b:89:a2:53:00:16:7c:87:67:77:5e:81:
47:f7:bc:85:9d:b6:4c:12:38:1d:0d:d9:cb:b2:87:54:65:17:
bd:d7:e2:13:4d:6c:7a:66:73:42:37:ea:a9:25:86:34:02:a0:
18:36:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:04 2025 by rpki-client