Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: hIGkOBELUKXfgz6jVx46abrW8QPMOIW+ln/E1gJdoEw=
Subject key identifier: C8:81:64:89:3A:49:19:E8:E7:5F:CC:1A:C1:E7:02:13:F2:AD:E9:B3
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019A24AF226C95E76BED93F1398D14B1485F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 01A7
Signing time: Mon 27 Oct 2025 08:00:48 +0000
Manifest this update: Mon 27 Oct 2025 08:00:48 +0000
Manifest next update: Tue 28 Oct 2025 08:00:48 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: +Q/QWyI4Gwl0xO65EkmzZ1DFzvvIMpetNejmAtm1y6A=)
2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:22:6c:95:e7:6b:ed:93:f1:39:8d:14:b1:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Oct 27 08:00:48 2025 GMT
Not After : Oct 28 08:00:48 2025 GMT
Subject: CN=c88164893a4919e8e75fcc1ac1e70213f2ade9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:db:13:f0:c2:c2:06:ae:99:2b:ec:80:b9:
af:e1:e9:11:63:0b:da:a3:18:44:f2:7e:38:14:ad:
64:2f:2c:04:e2:d0:c5:57:58:6b:94:02:78:31:3c:
5a:dd:bb:d2:0c:b1:75:7f:c1:c5:73:0f:c7:cc:12:
9a:13:65:12:55:2d:bb:5d:8a:47:c1:5e:71:bd:16:
40:25:36:fc:df:0b:d8:16:c6:96:b0:ca:af:df:d1:
f9:79:dc:06:a3:5d:28:e0:5d:79:4b:e1:0c:46:84:
7a:42:1d:e8:46:75:42:ca:df:1e:01:f6:c6:99:86:
d5:da:d5:4c:71:4e:c0:30:90:e4:c7:42:07:3f:b2:
9c:79:16:47:1c:b0:0c:2f:a7:b3:aa:39:70:06:d3:
2d:a1:e5:c0:a2:9e:09:7b:ba:00:91:ae:5c:4f:b1:
29:da:d9:ce:9c:f0:6c:cc:85:01:37:4c:2b:d4:92:
b3:72:80:9f:b5:39:b0:1f:db:14:b8:61:3a:a0:c3:
bb:ca:84:e1:6b:0d:6a:45:42:e2:cd:84:0e:13:42:
37:db:06:e1:19:a4:0b:4a:5c:71:19:95:f5:6e:1e:
fa:ce:5e:cb:41:28:0e:02:39:40:3a:6d:5d:3e:00:
1e:10:81:a4:3c:98:ce:d0:0c:db:d3:16:3f:38:ee:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:64:89:3A:49:19:E8:E7:5F:CC:1A:C1:E7:02:13:F2:AD:E9:B3
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:48:66:e7:de:2d:81:3c:bb:25:49:a8:5c:ba:24:3c:1c:c8:
cc:38:62:85:2a:07:a0:72:de:36:b9:7e:87:08:84:7f:f5:87:
e8:72:81:f5:d5:54:9d:ef:b2:17:8e:bd:25:8c:d2:27:4a:81:
a9:6e:0a:3a:29:df:7c:40:2e:fe:e2:8f:48:b3:da:e3:a0:b7:
de:22:15:4e:6b:4e:55:06:67:2b:89:38:ab:1c:43:36:7c:35:
b1:5f:58:cf:32:84:0d:56:e1:35:4d:37:cd:c2:fb:ad:d4:b1:
12:20:ab:10:2b:87:be:e6:0f:51:1d:86:ac:45:99:b4:b3:f0:
80:5c:1a:f8:7f:33:38:48:9f:6e:4c:7c:73:c2:99:9a:df:75:
17:64:93:42:58:96:cb:aa:fb:c4:81:40:4f:3c:ed:58:75:d8:
05:84:0e:9c:49:77:d1:1a:c7:ca:65:e7:84:02:f8:12:1e:73:
89:ca:80:3a:70:67:42:fd:d7:4e:22:61:01:7e:8c:57:ac:56:
5c:e4:36:0c:4e:3c:35:32:0a:f6:f5:8b:99:52:e5:d5:09:d7:
3f:67:f0:13:cb:d4:91:74:87:94:a7:10:58:c9:c0:a3:4d:ce:
9f:aa:dd:e6:54:95:de:fd:34:1b:01:99:7d:6f:bb:e3:74:d0:
c7:1d:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:48:09 2025 by rpki-client