Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: YA/FeckNzdGPVuu2FRT2/Jg1WCtJcMzK7pXYav4qvSw=
Subject key identifier: 8E:70:6C:90:DC:8A:72:E5:26:88:A6:47:D0:00:EA:59:20:2E:EF:81
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019A115F27B3391AB18D9A2698AA26170869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 117D
Signing time: Thu 23 Oct 2025 14:00:40 +0000
Manifest this update: Thu 23 Oct 2025 14:00:40 +0000
Manifest next update: Fri 24 Oct 2025 14:00:40 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: tKkJWczZ+ri2nXSdFSJXvxTlBHOIrkgb+AqNo814MIQ=)
2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=)
3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:5f:27:b3:39:1a:b1:8d:9a:26:98:aa:26:17:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Oct 23 14:00:40 2025 GMT
Not After : Oct 24 14:00:40 2025 GMT
Subject: CN=8e706c90dc8a72e52688a647d000ea59202eef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:05:f4:1d:bf:c8:2c:59:ef:b0:10:eb:c8:
e6:45:cc:c8:d7:f5:72:c3:a9:cc:41:b9:45:25:31:
45:12:a4:e2:5c:dc:27:01:25:1c:05:ef:bd:f7:ca:
54:2e:67:ce:44:61:ae:95:fc:90:ab:46:09:ac:91:
e0:1e:2c:54:80:38:70:cd:93:7d:8c:3b:c1:2c:e4:
e5:f7:6e:a1:59:b7:79:7a:6a:e0:1b:e6:dd:62:d1:
a5:21:b5:b0:28:47:4f:09:0a:ee:23:af:82:2f:06:
87:06:32:da:26:e1:19:b7:34:ee:99:d2:67:91:fa:
bb:d6:2d:c6:45:ab:58:b4:fe:21:43:83:c5:6f:a4:
80:04:a1:58:71:ce:b5:b7:4f:47:b7:59:61:04:d1:
88:52:a9:48:74:7b:67:67:7d:58:13:44:8a:5e:25:
b0:a4:08:56:a5:ed:af:75:55:fa:b7:a6:90:97:d2:
d6:da:ef:0b:d7:0a:bf:3a:66:32:5a:6d:ea:d6:e3:
18:0a:e1:7b:e3:83:42:c4:6d:03:38:a3:61:75:d8:
09:a0:4b:8c:28:c4:57:61:a6:47:6d:95:3b:b5:71:
18:c1:90:20:8e:b2:4a:30:68:25:68:c4:6d:52:3d:
dd:54:2e:79:e5:29:b6:f4:02:79:dc:89:c3:cc:c8:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:6C:90:DC:8A:72:E5:26:88:A6:47:D0:00:EA:59:20:2E:EF:81
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:98:43:31:5a:55:d3:3e:04:e3:c5:00:54:01:15:c2:d2:
9c:2b:ba:71:29:72:00:04:cd:b8:b7:61:40:8d:53:df:2a:91:
b4:79:42:ab:db:a4:b6:57:71:17:5a:95:3f:5a:73:f7:4e:68:
c3:ac:05:4a:fc:39:27:87:5b:55:44:7d:17:f8:ac:5d:ed:1a:
ee:fb:28:c8:67:78:50:57:16:5e:f0:6e:59:59:af:8c:db:f8:
de:c6:2a:f5:fe:cb:25:a2:25:4a:d9:ee:48:9f:c9:6e:ca:bc:
86:2c:ea:96:a6:09:f4:ac:bf:2d:dd:27:31:c7:f4:bd:0f:39:
70:7e:81:c7:2c:21:e0:1c:f6:d0:d0:d1:1c:7c:2d:85:dd:cb:
bb:bc:84:a1:c0:fa:50:df:db:87:a0:c4:87:f3:1f:1b:dd:e9:
80:97:6a:2f:ba:83:7c:aa:fc:ce:e9:71:85:92:27:82:06:1c:
ea:88:2c:16:39:51:ad:29:cc:08:17:94:d7:7b:99:3a:39:9f:
ee:7b:9d:d4:d5:0c:d9:e3:5f:0c:9e:f7:8e:b1:84:59:45:2e:
47:4f:ab:c8:5b:40:eb:3e:69:1a:eb:60:36:2d:38:3d:90:78:
15:0c:82:1b:73:05:c7:33:7f:b1:a1:8a:90:ea:a1:f0:3d:a1:
7c:74:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:50:02 2025 by rpki-client