Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: AJvU5Ss8Ldl8Bp0SJElUXEb96NP5lUR9NVTEBtFxRkg=
Subject key identifier: D9:30:13:00:5B:53:AD:F7:8C:1E:02:05:C3:5E:9E:2D:D1:6B:7F:DD
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019A209B826370662A6D28DBD545C7987488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 13:00:53 +0000
Manifest this update: Sun 26 Oct 2025 13:00:53 +0000
Manifest next update: Mon 27 Oct 2025 13:00:53 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: Vl+2HguKYK2BZqnPbw9QKsF3dKFbvPjv0BLuVO3h6bo=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:82:63:70:66:2a:6d:28:db:d5:45:c7:98:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Oct 26 13:00:53 2025 GMT
Not After : Oct 27 13:00:53 2025 GMT
Subject: CN=d93013005b53adf78c1e0205c35e9e2dd16b7fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:55:5f:7a:3e:33:c8:55:84:f3:b2:e6:a3:
bc:da:b7:c3:13:17:8d:ea:44:10:2f:84:e9:e2:54:
f8:d0:9b:73:7c:25:64:19:a7:56:c4:bf:1a:94:80:
02:21:d1:ab:8a:b3:fd:71:fa:e4:05:53:1a:10:42:
5f:c5:f8:a3:5c:85:47:26:80:84:28:05:90:f3:72:
44:ea:f8:b5:bd:77:19:7d:cd:74:1d:fb:b2:2b:3f:
b4:ca:0f:f1:1c:64:c2:89:1e:5e:61:08:35:a6:f6:
a8:54:59:14:16:e0:00:7c:1f:32:40:86:70:46:0a:
89:64:9f:fb:46:1f:e5:41:cd:64:ab:da:d1:97:38:
40:91:49:25:a2:b6:34:6b:45:54:0a:53:f6:b8:99:
3e:dc:d9:cb:ed:c3:30:54:dd:ef:68:9a:6d:a0:e8:
7e:cc:ca:0f:54:52:67:fd:e0:d0:a8:29:1d:c8:b7:
07:bc:31:e4:88:b2:80:5c:a6:98:63:fc:ea:70:3b:
93:7a:f6:74:e9:8f:87:02:03:7d:36:3a:c3:9c:20:
dc:be:cd:06:d4:8a:42:d9:89:eb:eb:7a:d8:88:a1:
1c:e6:8f:02:5a:ec:04:b0:16:1e:85:27:40:19:22:
00:4e:df:e0:f2:f5:c3:28:47:ca:df:41:4c:6f:ec:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:13:00:5B:53:AD:F7:8C:1E:02:05:C3:5E:9E:2D:D1:6B:7F:DD
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:bc:24:1e:08:55:33:d9:4e:ed:ac:2d:e3:fc:e8:ec:f3:
6b:73:cf:a5:aa:04:3b:30:d0:8c:f4:c3:f9:32:2d:15:a7:58:
43:cc:fa:44:cc:8a:5e:be:5a:3d:c8:7d:71:42:38:9e:06:48:
0e:8f:a0:f9:2f:34:68:7a:cd:44:65:e8:38:b8:e2:f2:f9:68:
6e:87:fa:a7:45:f3:87:06:23:d1:b5:68:b9:0e:1c:ca:9f:bc:
05:1e:63:31:af:88:1c:55:38:3a:30:bc:09:51:80:18:ee:5d:
fe:53:1c:01:21:d7:50:ea:a8:b0:72:76:a6:ba:da:66:16:bc:
c3:4b:69:f9:31:32:e7:39:36:34:13:86:52:7b:17:b1:db:e9:
77:4e:b6:e7:de:5f:12:41:4a:69:09:24:23:4a:0a:d2:33:51:
18:07:49:10:6a:e7:d7:e7:46:1c:ce:73:c5:ed:e0:c3:80:10:
0e:40:9b:c7:22:dc:29:91:27:f6:7c:ea:63:13:0f:01:70:83:
30:d0:74:fb:cf:2e:1a:b6:04:81:45:32:8c:9b:b5:a6:9f:79:
28:f4:ee:d4:17:3b:91:76:67:6e:62:f7:18:77:2f:5b:db:b6:
7a:90:b2:42:66:9d:af:3a:ef:2e:e9:00:d5:3e:6b:e9:0d:1d:
4f:85:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:43:21 2025 by rpki-client