Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: CwVYkPVpaJI0vREiCQ0H2Q8W3FaMO/4jo4H+3o2/AlY=
Subject key identifier: 1E:0A:90:D7:35:FD:B2:7C:D5:E6:CF:28:A1:E7:A4:E9:DD:37:C9:F9
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019A1F1A80B42CFD720B93AFA7FC5C831787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0787
Signing time: Sun 26 Oct 2025 06:00:21 +0000
Manifest this update: Sun 26 Oct 2025 06:00:21 +0000
Manifest next update: Mon 27 Oct 2025 06:00:21 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 28FEWNlR8ZRMOT1ULJXqwKUXlHkYGZcB2PzRtIgLJx0=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:80:b4:2c:fd:72:0b:93:af:a7:fc:5c:83:17:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Oct 26 06:00:21 2025 GMT
Not After : Oct 27 06:00:21 2025 GMT
Subject: CN=1e0a90d735fdb27cd5e6cf28a1e7a4e9dd37c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:36:83:20:cb:81:62:56:7a:d5:7d:70:75:
15:a6:92:35:3a:65:54:56:e7:f9:e8:34:d3:a8:d6:
95:8d:13:6e:0a:c6:3b:0e:f1:4b:f3:ea:a0:7b:d6:
5d:23:f2:21:e6:47:17:da:fa:8a:50:76:81:75:64:
73:30:f5:74:c7:af:80:0a:e6:86:b6:8d:76:4c:e7:
08:5b:26:3f:df:b4:36:42:75:51:9e:cf:f6:ca:9b:
db:03:a8:1c:6f:c2:fe:c3:a7:89:8c:56:24:87:0c:
f9:91:3f:e6:a5:56:78:56:b5:4e:a3:9b:51:cc:63:
35:12:9f:91:c1:63:4d:89:a6:f8:dc:0e:cd:5f:3b:
74:ee:c6:49:34:16:e6:a7:35:64:ad:56:64:e4:98:
87:13:a9:64:03:7a:23:1b:69:0c:0e:c5:8c:19:c4:
85:74:f0:59:f0:58:ba:de:d9:ad:35:90:9c:05:e5:
dd:f3:fd:3c:8e:68:ab:1f:cf:8c:ad:35:68:5f:ba:
79:d7:c5:80:2a:da:c1:ad:88:99:67:0d:4a:11:1b:
61:23:ea:99:72:c0:ff:2f:6d:1f:dc:58:7c:0f:0a:
22:52:53:a6:fd:54:e0:e4:2c:f7:3b:e6:35:e2:f5:
38:45:ec:d6:7d:af:10:2b:87:d9:02:fd:53:70:fa:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:90:D7:35:FD:B2:7C:D5:E6:CF:28:A1:E7:A4:E9:DD:37:C9:F9
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:93:4c:6c:2e:12:32:00:49:17:9c:73:2c:c9:6b:4d:2e:
2f:ef:f1:a1:1a:ca:99:0d:b5:1d:a8:91:df:19:ca:4e:0a:6b:
62:f5:26:bb:59:68:01:aa:07:6b:7f:60:1d:73:de:40:c0:7e:
47:87:75:eb:97:9e:4f:70:ee:e8:50:a0:38:ad:2f:59:73:5f:
ef:4c:15:85:f9:51:2d:e6:d6:fc:66:01:f4:97:12:81:2b:68:
02:15:b1:0a:6a:94:b1:4f:a4:43:5b:29:ce:bd:71:a0:f5:65:
54:ca:10:16:ec:2a:e1:fe:84:06:1c:c0:2e:f2:25:b4:e4:ae:
44:2b:84:ad:42:9e:c7:e3:96:81:b6:3b:c4:7c:65:bb:b7:f8:
06:38:70:bb:48:48:14:3e:00:4e:b7:b5:58:de:52:5c:b9:a2:
5b:ba:66:92:af:95:66:43:ee:e0:58:d7:8f:f3:a8:73:06:7e:
69:92:9b:75:3e:9a:d6:3f:91:b7:28:41:a7:80:fe:2f:75:4a:
a3:04:6d:16:df:f4:e7:3b:b0:93:2a:43:95:10:41:ba:bd:d9:
0e:12:f1:59:ee:9d:93:36:21:bc:70:95:bd:7d:c5:78:b0:77:
81:1d:fd:2b:a0:6f:30:73:51:17:f5:02:8b:00:aa:b3:ea:6a:
ca:2f:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:24 2025 by rpki-client