Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier: 2pEaqeo2hOGQh6Br1snxjtq8D8ChaF7vFPwB6uP9mwY=
Subject key identifier: 03:2C:60:4C:73:59:38:28:FF:93:52:D1:53:A8:41:21:58:97:4A:DD
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial: 019A2B1EB2CCA518E12A505BBBA903CC4C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 14:00:23 +0000
Manifest this update: Tue 28 Oct 2025 14:00:23 +0000
Manifest next update: Wed 29 Oct 2025 14:00:23 +0000
Files and hashes: 1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: txfovVpNvjERJkuFh2A1fl4wsiKaB76DNZZPHTjvtYo=)
2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:b2:cc:a5:18:e1:2a:50:5b:bb:a9:03:cc:4c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Validity
Not Before: Oct 28 14:00:23 2025 GMT
Not After : Oct 29 14:00:23 2025 GMT
Subject: CN=032c604c73593828ff9352d153a8412158974add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:30:13:4e:92:22:1e:16:d2:55:7c:99:0b:
4c:bd:c4:5f:f2:96:cb:eb:e4:40:b6:ef:47:6e:20:
ca:2b:e8:c7:ac:1d:40:01:b1:9b:b9:72:f9:b9:18:
86:b0:4d:c1:41:8f:63:81:16:8e:d8:8c:9b:c2:41:
bf:51:55:f0:7e:56:07:04:b4:73:c6:00:9b:78:15:
54:dc:ba:52:56:1c:95:72:75:6e:a5:5c:52:13:30:
db:c3:08:73:87:a8:9f:10:7c:00:97:38:0f:3f:ed:
39:84:fc:a7:6a:c3:fb:81:b8:45:83:62:48:75:88:
5b:49:bb:6c:fb:4f:62:37:55:6d:91:34:f4:b1:5f:
66:81:71:b9:93:80:76:58:13:70:2b:fc:81:95:77:
a1:1e:80:f8:53:eb:3e:a1:83:8e:85:23:3c:b4:bb:
0a:57:81:b1:77:fc:0d:b7:f1:59:49:a0:c1:c0:30:
16:97:67:7c:0c:e2:2e:27:78:d6:1b:bb:73:21:86:
fe:7f:54:06:61:31:65:31:3b:56:b2:b0:bf:c4:4b:
39:56:f5:5c:68:3d:b9:46:a4:f4:cb:07:ce:6c:09:
4b:5d:3b:9b:7a:5d:07:8f:b0:62:e9:a8:fc:17:fd:
da:86:2b:54:fa:ca:5f:81:23:79:b6:9f:8a:99:3e:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:60:4C:73:59:38:28:FF:93:52:D1:53:A8:41:21:58:97:4A:DD
X509v3 Authority Key Identifier:
keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:29:9f:3a:9a:4d:e7:a0:e5:77:81:9e:43:5c:18:64:c3:
1f:1b:af:09:49:a1:28:1e:92:72:7b:ac:c7:7e:2e:26:c4:46:
62:7e:64:04:74:07:f8:c8:d2:dc:94:42:8d:b6:ce:3a:16:74:
49:b7:c5:be:a0:9f:7c:85:d3:ac:fc:b4:95:99:2d:5d:21:cf:
06:a5:54:52:9c:dd:46:cc:b4:d6:84:58:3d:c6:eb:5a:d4:ae:
dd:66:cb:c3:15:45:ed:6f:c6:94:bf:dc:09:24:63:8a:07:18:
34:3a:f9:44:5e:c7:97:f6:c1:21:6f:d7:a4:66:f3:b5:f5:8e:
9f:b5:02:34:65:a7:8b:b1:9b:ae:b2:39:36:8a:fb:a4:cf:74:
03:ba:69:57:fa:59:ca:e9:34:2d:0e:d0:cc:4f:a9:a4:d9:74:
5e:88:e5:cf:27:d7:e9:2a:32:f5:0c:c3:04:61:42:b2:1f:88:
f2:ab:0a:98:c4:9a:36:a0:30:d2:d2:39:f9:9a:0e:cb:4d:2a:
97:a3:e9:3e:b1:c4:42:92:b9:70:f9:41:ae:b3:dc:ed:08:46:
80:20:7e:9f:a8:2c:ac:a5:ef:2d:9f:85:a8:b6:0a:13:e3:52:
02:69:21:33:d0:20:99:20:c2:b8:75:16:d4:99:92:e8:21:98:
de:a6:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:23:57 2025 by rpki-client