Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: pvvPr0RBE3srb5yV4jXdkeX6Ojyw20UviiisgkWoOWk=
Subject key identifier: 53:96:98:08:93:E4:11:95:6A:E7:06:C9:98:0D:7F:AF:56:22:8F:17
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 019A28C2788B1453FCF7EB04329C85468236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 049F
Signing time: Tue 28 Oct 2025 03:00:24 +0000
Manifest this update: Tue 28 Oct 2025 03:00:24 +0000
Manifest next update: Wed 29 Oct 2025 03:00:24 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: PGxlwntNsbcfJKV3lv3tT7e5A6U+QlcS5eujbH17E8Q=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:78:8b:14:53:fc:f7:eb:04:32:9c:85:46:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Oct 28 03:00:24 2025 GMT
Not After : Oct 29 03:00:24 2025 GMT
Subject: CN=5396980893e411956ae706c9980d7faf56228f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:40:53:c2:eb:b0:7e:ec:7e:4a:4b:a0:07:
f7:55:67:9c:e7:83:23:b8:8d:ec:22:ef:f8:02:95:
55:da:b3:97:59:c1:74:98:0b:aa:4b:40:79:56:7a:
fa:3c:cd:3c:bc:a9:c8:6a:70:07:73:d4:4b:00:66:
a3:f9:73:ee:a0:f4:06:80:27:fb:f7:c8:d3:2f:a6:
86:16:7a:27:12:a9:6d:a5:df:ed:21:54:94:32:76:
3f:ea:53:3c:a3:18:97:24:31:1e:99:24:ae:aa:96:
f4:13:94:fb:cc:44:9e:43:fe:5f:78:3f:a2:b8:bf:
98:d3:e6:d0:54:56:12:8f:01:56:84:4c:d7:20:21:
0d:d4:9e:99:65:f9:1d:c4:2d:9b:10:11:e0:4d:0b:
86:eb:79:fb:99:d8:9a:25:76:2b:f5:6b:10:bc:5b:
89:31:96:f2:7b:87:d9:d8:7e:da:14:65:bd:97:03:
7c:2a:8b:eb:fa:c6:2f:46:db:7b:45:26:68:d6:2b:
5c:a3:23:dd:34:a1:05:85:d7:28:b9:57:68:0e:5c:
ae:12:6a:de:e2:18:11:ec:f3:87:da:5e:f3:b6:d2:
30:3e:69:ed:68:37:a1:ac:46:13:72:ef:b1:f7:97:
2a:1a:78:4d:82:ef:db:cf:5c:ae:49:e1:69:31:54:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:98:08:93:E4:11:95:6A:E7:06:C9:98:0D:7F:AF:56:22:8F:17
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:4b:bb:c0:ae:50:55:5d:1b:26:73:07:9f:41:c1:f7:7b:
5d:ec:92:26:85:de:ee:c2:44:4c:9a:4a:21:9b:3c:eb:f2:f1:
4d:b6:06:d2:06:33:cf:1a:85:c6:0a:8b:a5:de:63:35:1d:64:
4c:7d:53:43:41:3c:17:b0:6b:a8:6c:7c:42:34:45:ba:a1:20:
eb:66:36:69:48:be:4e:c2:2e:b0:a9:a4:6a:0d:08:73:32:64:
92:04:7e:5d:dd:2b:78:9b:88:c3:66:d5:e2:c3:ef:63:56:ad:
2c:c0:46:c4:b1:a7:33:68:ba:5b:ab:52:93:06:39:95:a7:96:
94:bc:cc:3a:2c:f5:06:d0:cc:50:0b:6a:a6:c9:f8:68:fa:ae:
d7:9f:2e:3b:1d:6b:01:a0:64:a6:6b:3b:4c:7f:d5:bc:f7:a4:
a3:c6:50:55:b2:6f:0e:00:62:ec:e4:18:ae:9d:e9:0b:9d:7c:
b4:19:58:91:e5:88:f4:c2:93:23:bd:c5:a6:fe:fd:63:50:60:
2a:fe:a3:48:30:19:1a:61:e2:a6:63:43:2f:b0:d8:9c:87:c8:
c7:46:3e:61:c1:8b:48:89:79:22:a1:6c:ff:b4:e5:38:34:6a:
0c:90:79:dc:91:70:da:c4:d1:09:da:98:72:5f:dc:09:5b:75:
e0:fe:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:51:50 2025 by rpki-client