Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: StfFx/qjR4QrG/9mvFKuTcv7uZ42SuYpL5fBm9+M6I0=
Subject key identifier: B7:C8:F1:B0:61:15:80:A1:76:84:31:9E:DB:BD:F8:C1:6E:D1:CD:D9
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 019A0AB862706F5A58B08879011327CB1291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0F6E
Signing time: Wed 22 Oct 2025 07:00:47 +0000
Manifest this update: Wed 22 Oct 2025 07:00:47 +0000
Manifest next update: Thu 23 Oct 2025 07:00:47 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: DlbSIg+ekggWJOZg4fAjgbzsoAF5kr4GoAODBOTFde0=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:62:70:6f:5a:58:b0:88:79:01:13:27:cb:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Oct 22 07:00:47 2025 GMT
Not After : Oct 23 07:00:47 2025 GMT
Subject: CN=b7c8f1b0611580a17684319edbbdf8c16ed1cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:a8:03:a0:0f:fc:56:4b:21:0e:8d:78:dc:
a4:72:b5:ee:50:3f:1c:d9:f4:f8:6e:8e:54:45:a0:
1a:ed:93:b1:88:d3:33:e1:96:41:9b:5a:b6:1c:a4:
40:76:77:c9:bc:9d:3d:41:2d:ec:fb:06:93:e5:19:
e8:c8:3f:c4:74:95:2b:8a:4d:57:68:1b:3a:ef:7b:
57:9e:5b:b2:0d:a4:59:0d:3f:5a:56:d1:96:2d:d5:
b3:79:22:c9:fb:ef:9f:13:58:09:16:81:12:d5:fc:
91:e1:d0:86:d7:14:74:84:5a:43:3e:de:ad:20:ad:
a1:82:d7:e5:c0:b8:00:92:9d:30:bd:c9:30:34:14:
cb:5e:59:e4:e6:ad:c7:4e:7a:aa:b3:77:b6:11:86:
cb:77:e0:ae:3c:b4:aa:1c:6a:90:42:ed:12:2f:0e:
6f:a3:4d:eb:64:3b:fe:d1:85:97:03:77:d0:da:ae:
51:57:11:d7:8e:8d:aa:25:fd:d7:e8:f4:1f:e3:c0:
a2:d4:90:f4:e7:cb:a5:1f:bc:aa:51:e8:c8:7e:16:
c2:53:61:e2:6a:c7:2f:0d:68:ad:b7:89:b0:fa:f8:
56:e7:71:0c:f8:ee:d3:a0:0b:86:01:9f:48:b0:58:
fb:e7:b0:ff:50:46:b4:ee:1f:f2:2a:b2:dc:24:a2:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:F1:B0:61:15:80:A1:76:84:31:9E:DB:BD:F8:C1:6E:D1:CD:D9
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:9d:fa:76:3d:1a:57:51:6c:3a:2c:21:50:6b:a3:ed:93:
29:b2:77:b0:2e:77:55:8d:ce:71:57:ad:f1:1c:13:17:c9:b2:
75:54:84:a9:f8:98:50:8c:7b:c9:d9:1b:9d:f5:02:b2:4a:22:
2c:62:17:17:8c:b4:ba:00:41:2b:17:e0:4c:5f:12:3b:97:5f:
ee:3a:9e:7e:f3:58:ce:bc:83:02:75:ae:6e:80:34:30:44:b1:
d6:ae:5d:e8:cb:5d:12:f6:21:b5:c7:84:d1:c9:eb:26:e6:ac:
6a:14:d6:bf:ea:b2:46:0b:b0:14:c5:9b:4d:53:ca:28:94:20:
8c:a6:6b:1f:95:11:99:f2:1a:19:f4:ee:3f:81:55:cc:fa:4f:
cc:fe:2a:bd:5f:27:ae:ea:7a:d7:00:8b:ea:e7:7e:0e:c7:ba:
ae:b4:8d:b0:79:cb:3d:29:cc:26:9c:5a:03:d5:f6:35:eb:a9:
cc:01:cd:eb:b1:be:ee:55:7c:38:8f:46:e1:dd:05:ff:4e:1e:
d1:d8:61:1e:a3:c2:48:b8:76:d0:ab:d7:21:f6:e8:e2:56:51:
ce:eb:d0:8c:3f:24:4d:3c:78:03:5f:5f:3c:15:c1:45:66:11:
58:61:49:06:92:07:ed:5f:37:f7:8f:43:05:d2:ee:33:bb:1a:
bc:c1:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:16:58 2025 by rpki-client