Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: IfeMfD61Br39tfrhU0rtKqUHYVhR9MVPPcQ4HNRfXCg=
Subject key identifier: B7:BB:C9:FD:4E:C3:A7:1B:29:63:CB:BD:2C:D6:D5:8D:B9:45:2C:3F
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 019A20D24BCB1ED7631FE2E020A8303C3C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 06F6
Signing time: Sun 26 Oct 2025 14:00:44 +0000
Manifest this update: Sun 26 Oct 2025 14:00:44 +0000
Manifest next update: Mon 27 Oct 2025 14:00:44 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: 5hrBU7hgo/+zFHG0rNsg/xgXRI/rNeoZYD5NzfJrj5o=)
2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:4b:cb:1e:d7:63:1f:e2:e0:20:a8:30:3c:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Oct 26 14:00:44 2025 GMT
Not After : Oct 27 14:00:44 2025 GMT
Subject: CN=b7bbc9fd4ec3a71b2963cbbd2cd6d58db9452c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:1c:64:7e:90:de:b8:d1:7d:d6:f1:98:53:
93:9b:68:79:fc:77:53:ad:1c:c1:61:b6:3c:9d:b4:
2f:a0:2d:cd:a9:9d:bf:1f:8e:82:22:96:e3:b1:e3:
2a:78:1b:c9:1f:dd:69:be:b9:47:3f:0c:4e:93:f9:
64:44:a8:d3:08:f3:9f:4a:dd:4f:20:2f:1e:74:30:
89:03:57:0a:ef:89:f9:1e:01:ff:bf:4d:ea:40:bb:
49:b2:e3:46:3f:71:99:10:2e:8b:8e:57:51:52:1b:
72:fe:14:3e:c3:24:81:52:0d:8e:6b:15:a0:f7:34:
53:9a:27:ad:0a:dc:b8:f1:54:86:bd:e3:43:7e:96:
d3:6e:b2:1a:99:58:04:1c:82:f9:d3:dc:b0:08:e6:
a4:56:b3:43:4c:b8:75:bd:06:7b:a5:99:d3:fc:9d:
88:0b:0c:e3:66:92:8a:d3:f4:cf:c4:d7:3b:19:d7:
c1:1f:cd:d1:4e:17:57:85:16:cd:33:71:b2:05:46:
ff:4f:7d:82:fa:bf:b4:5e:2d:2b:9f:a1:08:40:a6:
50:44:1d:b2:53:fd:5d:f5:36:b5:7a:e9:b3:65:f9:
61:9f:bb:16:30:e6:18:0c:61:30:51:1b:a4:f9:67:
94:e3:90:22:92:b7:0a:fb:c3:a8:ed:4d:1b:2b:c6:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:C9:FD:4E:C3:A7:1B:29:63:CB:BD:2C:D6:D5:8D:B9:45:2C:3F
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:8f:53:eb:21:d1:63:3f:7f:c3:b8:30:a0:ae:07:9e:80:
28:89:0f:6f:2d:f8:4e:27:b3:cb:9c:51:a0:86:c5:f7:6b:6c:
d4:86:7b:15:f5:c2:6d:cd:79:d2:d9:52:e8:32:d4:64:ac:5e:
e7:77:72:33:5d:99:11:4f:1b:73:85:58:a0:e7:d2:66:be:01:
90:b4:36:d3:52:38:19:37:09:31:0a:8d:54:f9:21:49:33:f6:
66:dd:75:a9:43:c1:27:94:c0:22:79:a4:13:56:37:6d:f2:cb:
58:3a:4b:b8:46:be:f0:de:2f:d9:69:29:e0:46:c5:cc:c3:b9:
1b:39:98:8a:f4:bd:29:b3:67:ce:84:9e:3d:42:3e:d5:53:6e:
5d:77:59:6c:e4:0f:cd:96:11:24:0f:3e:6c:dc:22:6c:b4:b4:
bd:a5:7e:50:5f:64:4c:ce:a7:31:05:7f:54:ad:dd:d8:03:15:
8a:0d:a6:74:21:cf:bf:a9:ea:ca:43:07:56:2c:82:a3:f1:db:
e4:93:a4:89:18:2c:b0:aa:55:9d:37:01:d7:f2:3a:5f:0a:62:
92:b1:bf:3d:3e:23:01:11:42:83:c3:e2:57:eb:56:93:c4:c5:
bf:46:4c:05:65:b1:22:13:c8:12:6a:98:35:61:4e:4c:e6:87:
76:c3:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:47:18 2025 by rpki-client