Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: IrvfmsPi3eMk/JjF/L27PzUhE+dclorX/RRx8RO21OM=
Subject key identifier: 5F:4A:81:CE:41:38:98:A8:4F:90:6F:1E:5E:06:B7:9C:6E:42:3A:A7
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019A25535F8272460327CDF3C0A589D485D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 11:00:12 +0000
Manifest this update: Mon 27 Oct 2025 11:00:12 +0000
Manifest next update: Tue 28 Oct 2025 11:00:12 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: WNCl10fVKjnpQKlvzAzVI1V26KY3w42ifI6+wosPX/M=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:5f:82:72:46:03:27:cd:f3:c0:a5:89:d4:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Oct 27 11:00:12 2025 GMT
Not After : Oct 28 11:00:12 2025 GMT
Subject: CN=5f4a81ce413898a84f906f1e5e06b79c6e423aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:50:c4:e0:cd:1e:41:63:65:bf:ab:c2:1c:
b1:d9:8f:a1:2f:74:db:10:09:35:9f:f8:26:f7:a9:
eb:a5:a5:e8:85:ec:4a:46:b5:9a:56:91:ae:a9:b5:
82:3b:73:64:9c:5d:48:fa:9d:87:60:8b:90:1d:86:
bd:7f:94:29:1f:a7:e5:54:e6:07:f3:37:db:4b:a0:
8d:17:a8:6f:35:1a:23:51:13:d8:79:d6:dc:a8:45:
13:cf:07:f9:27:87:d1:2c:3a:42:33:2f:50:6b:3a:
98:b3:b3:01:c2:22:fc:51:4b:1f:b5:6f:19:18:3f:
e7:2d:74:43:a7:15:78:bf:f0:83:0e:fd:c1:23:4f:
f0:a3:a4:7a:fc:5e:5d:be:ed:ce:02:39:86:71:37:
a1:8a:7f:94:45:04:06:06:0d:6f:74:60:63:02:47:
ca:74:fe:b7:9c:d7:3a:1b:2f:af:c1:8f:85:f0:da:
69:de:c2:5b:9d:b5:78:00:d3:65:f7:38:7b:0f:36:
f7:8e:ec:e7:17:cd:ad:8b:be:eb:66:3d:09:07:8c:
50:c3:77:43:48:3c:c0:ef:7b:ad:05:3b:f9:83:51:
f6:52:c1:42:28:a6:44:c0:77:15:53:15:fa:1e:1d:
62:0f:6a:02:3e:80:d6:63:98:d4:1f:b9:37:fb:86:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:81:CE:41:38:98:A8:4F:90:6F:1E:5E:06:B7:9C:6E:42:3A:A7
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:f1:62:83:e4:1f:8a:7c:7b:3a:88:38:f7:40:34:b6:aa:
9b:c9:8e:76:5f:72:e4:d0:a5:da:06:72:d4:b8:78:69:a9:b2:
66:91:82:90:89:86:54:47:0b:6a:85:0c:cd:d9:bb:3c:95:2f:
86:da:9d:75:0b:28:6d:97:0a:cb:f2:89:a9:2c:81:f1:86:54:
c9:a8:f3:2d:e6:26:3d:1b:2e:61:77:ad:b7:3e:c1:a4:2b:08:
f2:eb:f7:cb:51:b3:d9:9f:1f:2a:a0:47:1b:d4:33:10:ef:21:
4f:83:94:12:0a:72:1b:a3:81:e9:63:d3:4d:c7:72:e1:f3:1b:
03:9a:70:e0:b4:1c:ab:49:4f:b6:f4:6b:89:ee:cb:e8:e4:b0:
a1:76:a7:55:97:f1:bb:c2:67:7c:69:2e:21:88:7a:b1:a2:34:
e6:d3:62:bf:06:87:e8:6f:fc:b5:62:07:b9:8f:3b:1f:3f:50:
60:48:0e:7d:48:5d:13:ca:8f:e5:93:2d:92:f6:80:af:5b:0e:
85:57:01:cd:32:ec:97:35:d0:94:8e:20:e5:b3:da:f5:ee:b3:
82:09:6a:08:b3:6d:32:03:1d:4f:e8:a5:59:ce:10:b1:c8:3b:
63:70:51:89:2e:20:10:13:8b:51:ec:a3:d3:e8:c5:a4:bf:97:
62:b1:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:09 2025 by rpki-client