Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: 6b3LboGEoBZn9i1jSlZshfGBY/87YtdgEO7BKC/fVA0=
Subject key identifier: B3:2F:EE:76:E6:CB:72:49:9F:96:45:EC:4D:AF:C1:E6:9C:84:FA:4E
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 019A09A51CCAC42F615EE0BD91C7F85D340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0EBC
Signing time: Wed 22 Oct 2025 02:00:06 +0000
Manifest this update: Wed 22 Oct 2025 02:00:06 +0000
Manifest next update: Thu 23 Oct 2025 02:00:06 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: tWu7/7JEHtVfwZdijl8czNQqVOsE7LSDuo+VgnRKJTk=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:1c:ca:c4:2f:61:5e:e0:bd:91:c7:f8:5d:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Oct 22 02:00:06 2025 GMT
Not After : Oct 23 02:00:06 2025 GMT
Subject: CN=b32fee76e6cb72499f9645ec4dafc1e69c84fa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:12:c1:92:6c:dd:85:f6:9a:c1:31:3c:0f:
e3:0a:ee:c5:5a:2e:2d:a5:c6:4f:22:fa:55:8c:53:
6b:62:e7:43:cc:b9:9f:a4:ef:68:11:fc:91:41:83:
4f:a6:31:c9:21:06:eb:78:f2:dd:ff:65:06:5e:54:
54:4f:b6:e0:26:eb:cf:e5:bc:6d:ad:2b:5c:6b:32:
46:08:49:0b:80:f8:22:c2:3f:aa:60:ed:8b:62:de:
54:85:e7:0d:d2:b6:d6:69:01:f7:9f:9e:6c:10:3d:
fb:3c:9b:61:db:eb:07:62:bc:44:c6:9d:da:b1:b1:
d2:18:f7:dd:e3:11:6f:f9:57:2b:3d:7f:fa:bb:26:
40:58:0d:a4:6c:e4:bf:02:cb:f5:75:33:6c:63:96:
11:48:f2:f0:ff:d4:88:14:6c:87:d8:c6:ad:af:3b:
0c:28:3c:87:dd:e3:cd:c6:d9:a8:94:35:ab:8f:e6:
56:0f:31:58:dd:1b:a2:7d:99:e6:94:72:64:d7:18:
bb:3e:84:38:a6:ad:51:63:7f:8d:5e:f8:cb:e5:b2:
f4:19:98:ec:49:fb:f7:da:f6:0b:85:4e:08:68:5b:
74:eb:86:ad:49:75:57:b5:90:e4:e1:fc:e7:e8:68:
1f:a6:14:bf:ef:91:9e:11:eb:35:99:d7:19:55:43:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:EE:76:E6:CB:72:49:9F:96:45:EC:4D:AF:C1:E6:9C:84:FA:4E
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:23:1d:2a:c9:48:a1:ed:d3:bd:f2:aa:75:86:bc:13:3f:
dc:2f:76:f6:b8:01:7e:27:fb:a6:19:07:b3:ac:ab:9a:7a:3c:
d3:6c:95:2e:7d:40:e7:8d:94:a7:04:1e:16:f3:f9:e8:4e:76:
72:31:37:ab:cf:00:e1:46:52:e7:8e:e8:dc:d5:3b:0d:cd:ac:
48:ee:29:c6:1c:30:82:c7:35:c2:8b:b4:aa:1f:cd:c8:77:1d:
54:e9:27:03:b4:a1:5c:b0:ff:6e:7a:2b:2a:f1:06:32:d9:00:
98:b9:41:13:c3:c7:7d:ad:7a:f3:b8:2b:34:8e:d9:54:eb:fa:
80:98:88:b1:9b:fc:3e:43:6f:2a:d5:5e:3d:e0:8d:71:24:c9:
ce:55:12:c7:9d:2c:69:eb:a5:42:31:92:47:03:4f:7e:d8:e0:
bc:48:87:4c:55:51:cd:a4:83:95:2c:64:7f:cf:3c:d5:4d:03:
df:77:29:fa:2e:d4:34:b1:f4:15:a4:f5:c7:4d:a7:c0:2d:66:
32:98:a1:7f:ce:a2:15:00:45:c9:9d:b2:e1:16:5b:b9:46:4c:
30:2c:41:97:10:65:ce:d3:ff:8f:68:3e:0a:3a:ce:a3:f3:15:
d5:c3:35:de:6e:39:39:13:11:80:3e:f1:23:51:a6:9f:ca:3a:
ee:8e:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:43 2025 by rpki-client