Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: 8wKTPh2BdkIPLrWiY8OYkYCYKZ4ep3qqSn14ax3wJf4=
Subject key identifier: B3:41:91:C4:7B:56:37:07:96:90:3D:B6:1A:80:49:1B:B5:6D:5E:27
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 019A2B8C5B96A270390876286B4D1B3B4799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 07BB
Signing time: Tue 28 Oct 2025 16:00:09 +0000
Manifest this update: Tue 28 Oct 2025 16:00:09 +0000
Manifest next update: Wed 29 Oct 2025 16:00:09 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: mkpuFQ8FGpKNZurtdNd/d+RrRSym5fTVWW733JzGvR0=)
2: ysIsaLM09cg2MhKfd83ZPzLp9n4.roa (hash: Bh4BJiariQCaXX5PXErLYBqRPl/Hwd8mcol52yoHkJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:5b:96:a2:70:39:08:76:28:6b:4d:1b:3b:47:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Oct 28 16:00:09 2025 GMT
Not After : Oct 29 16:00:09 2025 GMT
Subject: CN=b34191c47b56370796903db61a80491bb56d5e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:22:47:1a:a9:58:63:a1:71:d1:2c:8d:2c:
75:0a:08:ab:6f:46:85:27:5e:4a:6b:2a:08:5a:66:
04:9d:e4:80:18:1c:6a:29:3d:73:5f:0e:a0:af:3f:
6d:47:f6:3d:cc:13:a1:80:62:99:fa:e6:8d:84:20:
29:fb:e6:d4:57:82:33:d6:7b:5b:c9:83:7a:08:f6:
50:62:50:3a:dc:8a:68:36:c1:46:ca:70:59:29:cd:
e8:90:ea:dd:19:34:18:1c:85:4b:ce:ab:e9:da:1b:
ad:37:7c:84:dc:1f:50:32:c9:63:f2:37:10:0b:65:
62:83:61:f6:91:6d:20:90:86:2f:cc:45:84:e7:d0:
5c:88:7a:34:40:0d:96:45:7d:d0:d2:79:2e:74:41:
1c:a9:c6:ed:cc:84:7b:d7:03:08:fe:79:11:1b:5d:
a4:c4:c9:ee:b4:ab:45:bb:f9:51:b6:3b:01:7a:b1:
17:5e:ec:62:e4:ce:37:6f:af:f9:51:c1:1d:ba:c4:
a6:aa:c8:f0:e1:48:1b:25:b4:8b:7d:5a:27:a8:ed:
22:79:41:49:0e:58:c4:02:52:a1:40:94:e8:9d:67:
bf:b9:dc:49:f1:6c:b2:5e:fe:78:77:75:af:9b:38:
6c:4f:53:24:af:84:0f:b8:aa:4d:df:af:76:06:57:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:91:C4:7B:56:37:07:96:90:3D:B6:1A:80:49:1B:B5:6D:5E:27
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8d:59:ff:f1:58:04:2a:01:66:a2:8b:80:ba:7e:b3:8b:c6:
76:8a:15:11:73:20:78:8f:86:82:df:38:3f:d4:a5:1a:48:8c:
71:0c:e9:60:a8:d4:d7:0f:07:b7:17:ce:67:33:10:e8:7a:28:
d8:01:16:7d:2e:9e:b9:d6:9f:87:58:6c:c0:d2:aa:77:46:f6:
be:06:e0:6b:11:16:93:c0:0e:2a:58:be:71:b7:42:4c:1f:d4:
dd:ac:76:ee:0d:14:33:38:37:14:87:37:04:5a:a5:ec:8d:e2:
5b:40:9e:92:5f:6d:23:92:b6:4c:e8:9f:71:a7:13:22:f6:36:
04:42:33:09:23:6b:7c:aa:ab:65:ed:b1:a7:ce:e0:d6:41:37:
40:0e:a8:85:b5:bd:54:06:e5:d9:25:d4:87:a2:f8:00:08:1a:
4b:c6:01:3c:c6:6a:3b:83:34:98:90:4a:72:46:3e:a7:5a:ef:
d7:3a:4f:f7:e3:a3:82:94:97:98:8f:c0:46:3c:41:5d:b3:8b:
23:f3:8e:cc:7e:39:59:ad:8e:be:17:27:f8:8d:7e:b5:4d:9f:
f0:9f:b4:56:c1:85:99:a6:ca:41:85:86:d5:4c:a0:f7:c7:54:
e3:a2:81:0d:1c:38:31:5c:73:a1:8c:33:48:88:13:40:08:20:
d2:db:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:07:24 2025 by rpki-client