Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: 1UKQJj6h5RFSbbiq8lqbpoD7cqBtO2qYHgorkBiZE/c=
Subject key identifier: 55:1A:76:A5:93:32:1E:D5:76:07:70:02:C9:28:F5:93:3B:27:1D:76
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 019A2A431D6AA9EA4526C3B78A855CA1C071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 10:00:32 +0000
Manifest this update: Tue 28 Oct 2025 10:00:32 +0000
Manifest next update: Wed 29 Oct 2025 10:00:32 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: eHJ7UyREKqHI5dvPsm5vQsgtjCVab4WzoVfWvXMsa0k=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:1d:6a:a9:ea:45:26:c3:b7:8a:85:5c:a1:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Oct 28 10:00:32 2025 GMT
Not After : Oct 29 10:00:32 2025 GMT
Subject: CN=551a76a593321ed576077002c928f5933b271d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:70:47:38:be:c6:09:1a:00:30:d1:18:26:
6e:5c:bd:61:16:e4:49:c2:eb:63:7f:4d:74:0d:2e:
5c:06:ca:c6:d4:d2:94:23:86:9f:d6:ce:b7:2f:eb:
20:dd:ec:52:c2:1a:28:d9:e9:e3:8f:50:57:9f:1f:
f7:73:ab:28:d4:5a:96:a1:c3:f3:9b:28:ed:3c:b5:
38:4f:07:c6:7f:f6:2e:b1:4d:62:37:d7:88:4d:c0:
b5:fd:b1:ef:ca:67:d0:bc:10:25:f2:d2:e7:54:90:
01:b1:62:07:5f:0d:d8:be:f6:c6:a1:bb:04:52:c4:
f4:95:65:9d:36:fd:80:35:d0:94:96:b1:a2:14:25:
5c:bb:f3:ff:21:cf:c7:b6:38:68:72:db:5a:18:ea:
20:06:9e:8e:b8:b2:70:d8:25:46:e9:59:b5:ee:fc:
3a:37:e4:54:44:97:74:ad:6c:82:1f:05:98:63:56:
ac:8f:3e:94:37:2d:b8:5d:29:f4:a8:e5:0b:06:da:
af:7e:89:7f:a9:56:3f:b4:46:de:e3:bd:4a:27:5f:
6a:b4:73:1c:27:10:4f:d4:0a:38:26:3a:13:95:3c:
58:f8:37:2f:a5:aa:21:9b:9c:84:9a:09:60:fe:39:
7d:e9:64:77:3b:81:55:e7:70:e9:19:6c:a9:f0:60:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:76:A5:93:32:1E:D5:76:07:70:02:C9:28:F5:93:3B:27:1D:76
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:85:d6:c0:16:46:b7:bb:a1:72:94:31:b6:48:07:34:02:
4a:41:69:7c:1f:c2:3f:d5:55:af:74:f9:ca:db:dc:ec:d2:d1:
36:6d:ea:13:ec:3a:fd:ee:74:08:cc:d3:4d:77:32:1d:ab:2f:
87:7c:7c:f1:e3:6b:32:fd:5a:55:2b:e9:d8:fa:9c:5c:cd:77:
a5:6b:d6:d3:c5:1d:c8:b7:be:c2:b6:65:b7:18:6e:a2:c5:cf:
1c:bc:a2:b8:07:56:d0:38:46:0f:7e:e0:18:35:21:65:b7:89:
46:a3:4a:da:b1:e0:d7:2b:58:55:d9:fd:81:e6:b7:ab:90:87:
5b:28:f4:fa:cd:e7:dc:48:90:69:b8:66:a7:cd:b2:cc:1a:1d:
72:58:91:fa:8c:59:c3:02:a2:5d:fc:09:7f:df:33:0d:b5:7e:
c8:a7:c0:ad:a0:74:f6:51:11:3e:01:1b:1f:92:97:6b:5a:b9:
f8:e1:73:c5:e2:e4:26:81:89:29:a0:78:72:f4:7c:b6:c2:fa:
ec:48:7d:39:60:a6:08:82:03:bc:22:b3:e0:bb:7e:50:e9:8d:
77:1a:b5:43:6a:7c:b1:01:c6:91:aa:cb:2a:d3:32:0b:75:a1:
c4:53:aa:64:20:e7:69:26:20:fb:62:e9:ff:a0:77:c6:d9:dd:
86:bc:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:31:08 2025 by rpki-client