Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File: 5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier: U/XSoA8LqQXwon6+1tkZjDGImszW573+9vCeXl7Qyy0=
Subject key identifier: 89:1D:D3:04:3B:9D:ED:39:0C:A6:F1:26:81:0A:80:CF:D2:22:69:0F
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019A1B7524A95E76FDEB4FDDE6BACE65CAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 13:00:53 +0000
Manifest this update: Sat 25 Oct 2025 13:00:53 +0000
Manifest next update: Sun 26 Oct 2025 13:00:53 +0000
Files and hashes: 1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: EuHs7Iqj5d5EgF6tuhHw8g9xQp19pqok4W2oB4WY3t0=)
2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:75:24:a9:5e:76:fd:eb:4f:dd:e6:ba:ce:65:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Oct 25 13:00:53 2025 GMT
Not After : Oct 26 13:00:53 2025 GMT
Subject: CN=891dd3043b9ded390ca6f126810a80cfd222690f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:86:38:f6:14:5a:d8:91:bd:78:fe:74:78:
5c:d9:67:b7:0c:87:01:9e:3c:bf:6c:ad:5e:7b:43:
62:26:80:b6:c1:5e:d3:43:54:fa:e4:d2:65:65:f3:
ea:93:e6:65:97:00:80:30:27:e2:b6:14:ad:e7:f7:
3b:55:78:72:02:34:0e:b1:a5:bc:dd:14:0c:a4:f7:
ad:ae:90:c9:aa:b2:fe:cd:2e:d9:c6:7c:1b:c9:0e:
78:98:35:0d:4e:91:cf:bc:f9:4d:17:b4:16:3b:6d:
f1:05:2f:c5:b3:a2:20:01:83:d0:e6:bf:d6:a3:9e:
af:91:89:ac:24:17:c1:c9:ec:50:ff:c5:c9:43:ee:
35:e2:0d:fe:07:92:d5:70:51:62:ca:a7:f3:3c:63:
c9:7c:5a:4a:ff:a2:25:56:93:fb:e9:ea:f7:1d:a4:
21:f4:15:d0:6e:c3:8e:95:c9:45:37:e1:d1:fc:b1:
54:6c:03:44:58:6c:33:b6:49:ad:b5:b2:7e:88:69:
90:a4:2f:aa:b4:58:d4:ac:64:f8:af:18:63:71:a4:
aa:ee:0f:17:50:98:ef:d2:d6:d2:21:1f:0d:ce:88:
df:f3:28:5f:96:08:a5:2f:77:96:e0:cb:08:4b:ee:
7f:42:64:03:17:a8:19:e4:29:7f:23:6b:8b:17:1d:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:D3:04:3B:9D:ED:39:0C:A6:F1:26:81:0A:80:CF:D2:22:69:0F
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ae:89:58:81:9f:6b:ca:12:c0:00:a8:97:dd:8b:85:aa:90:
29:18:b7:99:fb:97:f4:91:c0:25:cc:8f:02:0b:fd:52:69:1b:
ec:80:f5:3e:85:35:07:96:5e:d5:e7:0e:3b:2e:f0:11:eb:da:
de:08:cf:77:ef:ca:74:15:eb:18:57:b8:32:e3:07:36:84:4d:
3d:7c:30:a6:6f:55:76:f0:83:2d:3a:e7:26:54:fe:2f:5f:49:
2e:d7:ba:5d:a9:c1:46:cd:86:c1:72:c4:00:f3:cf:31:65:1f:
3b:5d:b1:f8:3a:5a:a8:29:55:bd:db:15:08:77:cb:ee:d8:46:
c0:31:a4:3d:28:85:88:8f:43:17:0d:84:24:fb:ce:1b:86:32:
94:6a:8f:68:ed:4e:eb:e2:83:99:b1:46:76:72:c6:22:59:76:
98:da:fe:ae:8f:d5:90:6d:af:95:db:aa:f9:bd:7c:42:e7:ba:
c7:a1:fb:a9:b3:ee:49:8f:64:68:09:2a:04:61:16:dc:84:4c:
1b:3d:53:bb:61:3c:3b:79:d0:6f:87:1f:61:ed:14:e5:cd:68:
35:21:3f:0b:14:de:90:5a:47:03:66:4c:84:55:85:66:41:cd:
b6:fc:e3:66:72:0e:cc:05:1a:d2:f5:c8:a7:11:a6:9b:fb:d4:
e4:a2:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:05:42 2025 by rpki-client