Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: shD6sDk1JB8SbvtY1vL7tw1MW63jheGHD8zmu5alobc=
Subject key identifier: DC:8D:72:2D:C7:F6:76:03:84:D6:E8:3A:59:3D:58:64:80:4B:41:86
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 019A28F934C2CA5709C9B32A770A25B73CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0DB3
Signing time: Tue 28 Oct 2025 04:00:11 +0000
Manifest this update: Tue 28 Oct 2025 04:00:11 +0000
Manifest next update: Wed 29 Oct 2025 04:00:11 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: A8VfeLyg9cm6zb792mImkd1PGXSb0XrmsZ+W5kCncYs=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:34:c2:ca:57:09:c9:b3:2a:77:0a:25:b7:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Oct 28 04:00:11 2025 GMT
Not After : Oct 29 04:00:11 2025 GMT
Subject: CN=dc8d722dc7f6760384d6e83a593d5864804b4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:cb:b6:e8:ec:35:a4:a9:9d:44:3d:c4:e5:
eb:c9:55:75:a3:c2:1d:38:90:ef:d1:08:d1:8a:c7:
be:96:b2:fe:aa:2c:d5:0f:4d:e4:31:4c:94:ec:79:
b1:7d:f2:29:ea:0f:16:95:81:b5:0b:6a:3f:3f:58:
a3:e8:0e:5b:87:33:0e:f4:31:12:24:e6:88:70:84:
9d:50:79:e2:64:62:87:74:04:d0:44:91:2b:1c:83:
f7:9c:c0:e5:3a:3d:dc:a5:35:98:a8:dc:d6:51:f5:
b8:f1:ca:dd:3f:10:bb:e5:1e:10:98:11:77:d0:cc:
c8:63:10:5e:54:c4:27:80:19:1e:6f:3a:4e:a0:76:
66:b1:29:46:89:65:5f:77:75:6c:67:4e:0d:ce:89:
dc:39:df:2f:30:f8:76:29:30:55:c3:10:8b:96:3a:
e1:bc:9d:5a:9f:cd:29:24:12:13:bb:86:be:98:1f:
e7:68:c9:94:5c:14:44:9a:57:bb:d9:fb:e7:25:4c:
ed:aa:10:f4:fe:34:7c:bc:a4:7b:19:e8:1d:07:7d:
c8:97:97:08:4d:85:36:ec:35:8a:bf:fb:9b:78:d3:
f9:98:d3:04:5f:8e:c9:85:67:1e:fa:1c:2b:55:50:
a3:fd:bf:b8:28:ca:08:e9:7f:6a:5a:ab:95:6c:99:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:72:2D:C7:F6:76:03:84:D6:E8:3A:59:3D:58:64:80:4B:41:86
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:89:20:13:64:a1:5e:3b:f1:b6:de:c9:53:d3:82:e6:1a:a2:
71:91:31:d5:f3:20:cf:ab:94:ed:b1:e4:fa:50:9d:a4:01:32:
90:8f:91:ba:cc:b7:c6:a6:27:56:42:ec:e7:e1:ca:ad:47:eb:
fe:ef:37:b1:a3:49:fa:46:c1:81:94:91:78:08:58:56:e4:a6:
5f:a2:a1:75:18:83:f3:5d:7f:61:63:5e:bf:11:38:7e:01:b9:
59:96:cb:7a:2e:25:16:ef:3b:1e:7e:a4:26:51:03:e1:ea:0d:
06:76:5e:17:09:a1:e8:20:19:13:2f:2c:95:c0:df:7b:e2:4c:
23:b6:50:47:2f:53:59:e9:08:13:b2:69:db:c8:fa:57:e2:e7:
2d:3b:f5:19:d5:0c:0e:81:2f:42:af:d2:95:25:bb:bd:9f:a5:
8d:8e:19:ca:c9:8a:42:cd:48:14:c4:67:32:7e:5a:9b:ab:d6:
fc:1e:46:2c:a3:97:d2:9c:3c:7c:b6:9f:ff:49:05:99:b7:d4:
b6:ec:ab:8e:22:9d:f2:85:26:3d:fa:15:28:0a:7f:1b:51:15:
31:bf:91:a3:45:40:85:25:6a:6d:67:f9:5e:43:46:35:02:1f:
1b:1e:57:de:75:51:86:16:3c:5d:ef:33:a8:c6:2d:3e:34:6c:
d9:3c:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:37:05 2025 by rpki-client