Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json)
Hash identifier: qCArFESHkT1OVufZxzvoYL19D+ydIYrhgpi12roFlQU=
Subject key identifier: 9D:F6:EB:23:6B:6A:4D:62:F5:1C:CB:F7:12:02:81:82:B1:8B:F4:6F
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 01993191C7C73BF64F716D698D2597071FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
Manifest number: 029A
Signing time: Wed 10 Sep 2025 03:01:01 +0000
Manifest this update: Wed 10 Sep 2025 03:01:01 +0000
Manifest next update: Thu 11 Sep 2025 03:01:01 +0000
Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=)
2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: 2tPSBaF4RWvhch3sM0mOi0EnEGSJkqAFpZ3bknetRMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:c7:c7:3b:f6:4f:71:6d:69:8d:25:97:07:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Sep 10 03:01:01 2025 GMT
Not After : Sep 11 03:01:01 2025 GMT
Subject: CN=9df6eb236b6a4d62f51ccbf712028182b18bf46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:b0:83:55:4b:70:27:21:db:9b:98:d3:9a:
42:ef:32:12:af:89:6e:da:b9:8d:cf:d7:f8:7a:f7:
42:8f:58:a3:69:2a:98:55:ea:a5:70:7d:91:41:ba:
2e:6d:66:2e:0d:9a:f9:e0:df:0f:36:5a:a0:53:cf:
39:5f:54:d2:e7:28:c2:8e:be:54:ef:a6:a4:19:cc:
a6:89:98:c0:63:35:9d:a3:2e:c4:d2:ea:a5:b6:44:
44:ca:5f:f0:9d:a6:ed:db:71:a5:8f:a4:0f:d7:d3:
74:1a:f0:b5:02:f7:60:c7:f1:79:27:c8:68:d7:b3:
aa:df:8d:fe:91:b0:9a:1a:8f:eb:8b:c3:c9:4d:fc:
b9:32:af:7f:dd:76:30:d9:51:88:f9:6e:77:40:a1:
d2:ee:4e:92:d1:20:71:55:f4:2f:34:db:0d:5d:6c:
b2:48:2d:ec:a9:d3:f3:87:e7:cf:c2:6e:b6:6e:82:
7f:88:30:c1:cf:9a:ab:bb:97:48:d7:4b:94:67:60:
c7:69:08:a3:7d:ad:ba:db:80:f6:4f:c7:a9:d6:07:
67:27:9a:ce:02:e1:c5:a4:44:b9:da:88:a6:d7:e3:
62:8f:d4:7b:bf:40:8c:fa:d9:47:36:55:56:2a:c8:
cb:d0:b8:4f:c5:c7:b8:9c:e5:f0:31:1e:5e:ac:ed:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:EB:23:6B:6A:4D:62:F5:1C:CB:F7:12:02:81:82:B1:8B:F4:6F
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:22:07:96:b5:f6:9b:3c:34:88:a3:06:f3:00:f2:f9:1f:
ac:94:56:55:54:94:51:8d:a7:78:44:61:87:9c:ea:66:50:7c:
92:a5:1b:76:de:34:78:e6:0a:45:e9:a6:57:4a:2c:de:93:4f:
11:a7:a1:bb:26:2c:91:d3:90:b1:9f:e6:3d:ae:09:da:88:df:
2a:03:47:06:f6:49:fb:6e:89:fe:fd:98:e2:fe:93:42:af:d5:
7f:f5:fa:35:95:53:a2:1d:3f:20:b6:02:f9:82:bb:c9:5e:6b:
02:a5:b3:38:3a:36:0f:15:1a:36:45:58:51:75:ce:6c:32:29:
e1:c0:3d:9e:20:38:9a:8e:c7:c6:36:c5:31:d6:5e:2a:fb:1c:
9e:ae:f2:d0:6d:a5:e3:88:a0:4c:3d:5f:d8:de:a1:09:db:7c:
2f:1d:ab:0b:6c:ed:57:22:3f:9b:ee:22:c7:39:2a:f4:93:8a:
f5:85:06:d9:a3:f5:04:86:71:0a:63:05:ea:52:73:3e:79:f9:
1c:7a:3e:e2:fb:d8:86:e6:3c:53:42:35:c7:d2:30:79:54:bc:
16:9f:5f:21:ee:35:de:6b:d1:dc:63:6d:71:34:5e:8f:e8:37:
3f:47:e7:be:a8:63:41:08:2e:0c:ec:79:c3:15:4e:e0:9c:5f:
db:aa:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:31:00 2025 by rpki-client