Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: w4gSF+tPFoEgNJnrjVX3lzsA6qCr8tGJPz+ciKChCLY=
Subject key identifier: C1:AD:62:95:4B:60:56:CA:6B:04:74:7D:DB:9E:40:0C:C8:B7:14:AA
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 0199228CB8084BFB082013EF327AD1003219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 160B
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: WQF353wP+t6UNAeDScqreK4MWAbGYWpX5Fslq9E3Lg8=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b8:08:4b:fb:08:20:13:ef:32:7a:d1:00:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=c1ad62954b6056ca6b04747ddb9e400cc8b714aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:1d:10:ac:4e:d3:d8:1f:b4:d8:d0:dc:4c:
f4:cf:bc:b0:70:f6:d6:a0:b6:af:68:f4:7b:08:eb:
4e:22:e4:08:c2:a3:22:13:0f:5e:c8:96:89:0a:57:
60:ff:a5:d5:60:9d:02:d9:9d:7f:ab:f8:89:54:b1:
5c:8a:5c:b2:e9:3f:eb:4e:71:70:79:f1:4c:23:e2:
93:fe:40:62:b3:19:ce:1b:ec:1b:38:1d:50:6b:5d:
85:45:ce:42:e9:87:e5:9c:c6:5f:41:83:da:13:68:
d7:7e:fa:05:45:16:aa:dc:c2:cc:42:d6:5b:2a:72:
94:78:79:3d:6b:8d:f0:1d:cf:c9:8e:a7:55:55:f4:
87:bd:68:e6:9c:b7:0d:c0:ad:87:fa:9d:25:74:3f:
6a:53:3d:9d:68:c1:fa:6a:a9:78:04:6c:c2:48:31:
56:d7:31:bc:b0:8e:2e:fc:aa:5b:c8:2e:09:44:18:
cb:01:a7:5a:e7:65:0e:fa:12:70:99:d5:eb:4f:11:
cc:c8:00:60:80:76:cc:93:87:5b:ff:00:aa:a1:33:
3f:27:33:75:44:bc:a3:0e:f5:9a:12:87:44:15:93:
c3:a4:57:d5:54:e8:da:e3:a1:b7:e2:c5:3b:b2:5c:
14:2a:db:b6:b6:d9:f0:39:fb:c0:b2:16:3a:b6:78:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:62:95:4B:60:56:CA:6B:04:74:7D:DB:9E:40:0C:C8:B7:14:AA
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:e8:70:1b:4d:b4:0f:33:7c:b1:9b:f5:4d:bf:6c:d9:54:
9d:65:e9:0f:ea:50:86:7f:21:c1:88:24:9a:a2:ab:37:5e:a0:
5f:b1:09:4d:30:4a:d8:af:11:1e:cb:38:11:13:24:2e:c5:28:
4b:e9:ab:0c:ea:fe:48:c0:bd:d4:85:86:fc:04:c1:eb:f0:00:
5a:f6:54:20:52:81:24:71:59:78:c5:55:a5:7c:89:d1:bc:bd:
c5:d2:24:cd:a1:4f:cc:bd:bf:ee:6a:2c:c6:8b:19:a9:ac:9c:
20:ba:7b:1f:4a:05:e3:40:e6:8f:7d:21:e2:f6:bb:be:53:ad:
da:1e:40:06:92:39:77:c4:0f:43:02:b8:7c:cd:ca:80:70:4b:
a4:03:88:73:37:71:48:a3:d3:fa:83:c1:ea:35:30:a5:62:50:
69:bd:44:8e:4d:91:de:40:70:4c:07:65:c4:e0:8a:ff:07:c2:
92:d1:0a:e5:e2:5c:16:19:7f:e9:04:4d:23:5c:ed:16:06:d4:
92:30:5c:42:fc:36:88:7a:83:5b:25:de:73:b6:33:a3:02:10:
02:ac:93:31:dd:5b:c5:a4:2d:82:e5:c5:51:10:85:64:82:bd:
cd:df:f5:f2:64:19:b6:c0:0c:79:63:b7:68:4d:df:91:dc:12:
fb:83:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client