Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: geqwTp60Hh/xDnwIQ1nux2tjgCkxi97/+vME+MB0WDk=
Subject key identifier: 8C:A4:1C:C2:F4:A0:BB:6B:E1:AB:6C:27:FD:2F:01:C0:B4:BD:A8:D0
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019A32333A37285E752C03F7E1E824DBEA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 0367
Signing time: Wed 29 Oct 2025 23:00:09 +0000
Manifest this update: Wed 29 Oct 2025 23:00:09 +0000
Manifest next update: Thu 30 Oct 2025 23:00:09 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: y2mWRwCEMFOK/nuhUWMJp9+OYzZf4DkoA5b3/KriirE=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:3a:37:28:5e:75:2c:03:f7:e1:e8:24:db:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Oct 29 23:00:09 2025 GMT
Not After : Oct 30 23:00:09 2025 GMT
Subject: CN=8ca41cc2f4a0bb6be1ab6c27fd2f01c0b4bda8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:1c:d8:08:b7:ae:91:27:5b:1c:39:60:c6:
31:b4:a2:fa:7e:d0:d2:a6:d6:1b:41:6f:c8:96:9a:
0b:a2:4f:f1:cf:e6:88:d9:e1:7b:f7:87:81:a8:4c:
e6:93:0f:54:d9:c1:02:6e:79:da:7b:f0:1e:42:b8:
90:fb:03:2a:a3:a7:e5:8a:9c:9f:bb:98:a6:23:3e:
47:5f:1c:89:5d:1d:8e:8e:f8:d6:67:aa:c7:06:8c:
c6:c1:ae:ac:5d:ff:2b:d9:d2:7f:75:dc:e7:34:ca:
19:7c:e9:43:c1:30:e5:9f:88:aa:c3:ed:0c:bc:e8:
71:30:20:c9:dc:c0:45:35:fe:95:ba:1b:dd:c3:e5:
dd:0c:2e:81:7c:c6:d3:6c:49:78:99:22:d1:3b:ea:
15:30:78:68:fd:29:05:0a:90:ef:c9:ea:ed:6c:95:
2f:46:b8:aa:c5:5f:9f:b3:52:f1:39:90:b4:e1:1e:
03:ee:c5:b1:2b:db:b4:f5:a4:37:42:59:30:61:0b:
62:d9:e3:75:5d:9c:c0:31:5f:5e:08:1c:a7:1c:af:
60:9b:2d:fb:c2:a7:96:20:42:12:2e:53:db:41:b3:
bc:b6:3b:f7:5a:9d:c0:2b:2e:48:ae:dc:5e:29:24:
83:eb:ce:14:07:d0:03:50:8e:d9:68:cb:93:b4:81:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A4:1C:C2:F4:A0:BB:6B:E1:AB:6C:27:FD:2F:01:C0:B4:BD:A8:D0
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:47:58:36:dd:3d:2f:09:29:c5:4f:88:e8:34:e8:fe:48:1b:
28:fc:64:84:ea:a8:45:b8:4b:61:e5:cb:d0:dc:c7:3b:8d:03:
fa:44:fa:2b:e5:e5:a7:26:4e:87:91:3c:b4:69:4a:31:30:58:
17:67:73:e1:48:e1:63:ae:68:3f:b5:e5:57:c5:a6:12:10:32:
20:f7:d6:cc:18:40:a3:ec:4f:8e:5f:e0:33:fc:bd:31:63:e3:
c1:5f:de:c7:35:0f:64:96:e0:7c:c9:9a:22:e9:90:f7:a0:fb:
5f:d9:f2:c1:4e:52:fe:5e:3f:9a:33:10:fd:11:c0:b0:c8:62:
4b:c4:88:d9:52:2e:15:e0:9e:61:0d:74:2e:eb:92:fb:5d:7a:
8c:37:d5:78:eb:af:8e:b3:95:6e:8d:9a:3d:44:2e:99:db:1c:
8d:ea:e0:9b:5a:03:c9:92:38:bf:23:1c:65:3d:a0:9f:1d:ed:
d2:c1:42:8a:c8:df:1b:12:f4:0c:fc:3f:70:f5:05:93:fd:02:
19:36:55:07:ab:ed:8a:14:ec:bf:eb:8d:a7:b6:48:7a:23:75:
f7:9f:3b:4e:a7:52:ab:19:b0:6a:f4:b7:c5:d0:97:2c:3a:fa:
aa:fa:6e:d0:9d:bb:c3:04:58:a7:4f:34:d6:25:01:80:1a:4c:
1e:24:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:57:04 2025 by rpki-client