Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: pIxm5cGlTFVuoUnEUGU8BBg9dkBQQ2x0xIXnGUR8QM4=
Subject key identifier: D7:65:CF:95:4A:0B:04:49:3B:B6:B8:48:89:60:36:33:DE:91:57:82
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019A3A924C17034D13AF486C06B58A03742F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1494
Signing time: Fri 31 Oct 2025 14:00:57 +0000
Manifest this update: Fri 31 Oct 2025 14:00:57 +0000
Manifest next update: Sat 01 Nov 2025 14:00:57 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: maGhDF0OvpClVI/OwM+LZM/qNSEBNW10IgBOR+A7WpM=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:92:4c:17:03:4d:13:af:48:6c:06:b5:8a:03:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Oct 31 14:00:57 2025 GMT
Not After : Nov 1 14:00:57 2025 GMT
Subject: CN=d765cf954a0b04493bb6b84889603633de915782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:20:ad:0f:98:c7:23:52:10:6e:dc:53:b4:
14:6b:ba:b5:f8:de:1c:e6:96:51:c0:6b:9a:af:cf:
55:15:d9:c7:78:2f:ba:5d:a2:ee:55:96:68:70:ef:
ef:32:85:b0:73:c5:a5:74:9d:11:62:c6:56:60:ac:
0f:80:d1:1e:61:b8:06:b5:36:7e:e6:94:3c:e9:6e:
23:b6:74:a9:3c:c9:eb:ac:34:b6:d5:8f:e5:0e:38:
65:68:5f:e7:64:d3:83:f3:77:0a:2d:ac:62:b3:27:
e3:90:f2:3e:d5:58:f8:4a:51:47:4e:02:97:bd:17:
14:a3:68:3f:f8:3c:1a:fa:3d:17:bb:cc:d9:54:26:
dd:92:00:05:a2:12:84:14:eb:65:89:2d:80:92:e3:
26:4c:d8:fd:8b:a7:b4:b4:da:32:fb:d3:51:85:6b:
29:88:4b:99:ec:ac:ec:fe:a4:33:09:61:b2:80:81:
a2:b7:69:5a:71:50:82:98:df:a0:b2:94:e3:5f:81:
43:2d:03:13:33:56:49:f1:a0:61:5d:02:72:bd:10:
d9:f3:cd:f0:77:01:ba:d0:0b:ed:64:3b:7c:0b:c7:
84:f1:70:8f:ce:a9:60:9e:4e:c1:ea:02:cf:f9:4a:
df:e7:f9:75:60:86:03:f6:94:69:1b:4e:3d:26:7d:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:CF:95:4A:0B:04:49:3B:B6:B8:48:89:60:36:33:DE:91:57:82
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:97:09:31:13:5f:34:77:a7:c1:1a:bd:71:1a:0e:86:e6:76:
a2:94:ac:23:36:23:f5:66:82:8d:ca:0d:db:61:fe:8f:f3:1f:
5e:3b:76:01:fa:49:6f:02:6a:d7:89:92:da:48:4d:52:78:30:
86:ae:53:7c:ce:df:aa:23:26:73:74:a3:1f:10:03:7b:95:6b:
42:77:d4:60:64:74:5d:aa:ff:f4:17:fd:6f:53:a1:3d:d2:24:
f7:c5:5f:ef:2f:21:71:38:c0:da:f2:21:19:2e:79:9a:57:cb:
37:7e:53:15:58:8d:e8:80:c7:7f:21:be:82:67:05:39:ed:4e:
3d:08:73:f0:ab:33:83:df:2b:d2:c6:e4:15:5c:8e:51:42:12:
e9:fa:07:7d:09:60:d4:ab:4d:72:00:2f:df:9b:6c:9a:ea:9d:
0f:58:a8:7a:f9:f1:3d:5c:d7:94:cd:56:82:cb:a4:fb:bc:95:
95:fd:71:7c:47:f2:17:f8:8f:97:dd:f7:79:ce:25:b1:41:70:
6d:36:c6:de:52:c5:fe:89:29:a3:ef:e2:34:0f:d3:e3:60:4f:
9e:fd:4d:28:45:bb:0e:02:46:6b:1e:16:d9:71:63:e0:cb:4e:
a8:6a:f9:10:d5:3c:de:16:06:c2:c9:a7:2b:a1:5f:6a:f4:94:
ab:52:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:21:37 2025 by rpki-client