Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: eH4LsFkljsInkRE9/sJrPh+udfhGAxcfJ25p22nHJuU=
Subject key identifier: D0:84:1A:44:A8:88:21:78:EB:7E:C2:F0:F5:F4:7C:D8:66:FD:0D:3C
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019A2D7AE9FC8E12D33486E105AE022424E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0419
Signing time: Wed 29 Oct 2025 01:00:21 +0000
Manifest this update: Wed 29 Oct 2025 01:00:21 +0000
Manifest next update: Thu 30 Oct 2025 01:00:21 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: dvj5qanuOAbjkmwMmkZpYR0sVu4sH3YXBpovGwlUOVY=)
2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7a:e9:fc:8e:12:d3:34:86:e1:05:ae:02:24:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Oct 29 01:00:21 2025 GMT
Not After : Oct 30 01:00:21 2025 GMT
Subject: CN=d0841a44a8882178eb7ec2f0f5f47cd866fd0d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:7e:a7:72:f0:0c:97:59:78:26:30:d6:a5:
60:18:14:12:cb:90:b8:92:72:96:bb:e5:fa:4c:2c:
17:7b:27:93:a4:4e:74:f0:e0:09:7d:48:cb:61:77:
5f:fd:f5:d9:e8:58:fa:76:47:72:77:7d:b3:20:e0:
9e:f4:03:c8:b9:34:3b:54:ba:04:ee:14:b8:47:ba:
d6:64:a2:3e:4e:d7:3b:cb:6c:88:95:f8:37:52:8a:
8a:b4:7a:b5:a5:70:83:e7:a9:4e:26:b1:15:c3:dc:
2b:bc:76:43:1b:1c:80:60:98:d7:17:9c:b4:0b:c3:
f8:9a:25:1c:7e:15:a1:74:f4:df:f2:f4:63:9b:bb:
c7:16:a5:88:dc:52:17:e0:61:5c:42:32:2e:b7:d9:
26:e3:55:be:b8:05:ce:46:7c:cb:9c:d4:ec:cc:1c:
33:c8:73:77:d7:d6:bf:c3:89:48:6f:ce:d1:6c:e9:
b1:1e:77:9a:07:ad:4a:1c:ff:00:92:2b:8f:63:09:
13:47:3c:65:dc:cf:53:1e:64:b6:2a:33:eb:85:fb:
94:46:83:dc:19:c6:dc:68:1d:f2:43:56:44:6f:ac:
08:dc:b4:42:01:90:3a:9b:41:70:0f:e8:86:eb:c2:
3e:26:b2:3a:a4:67:a4:44:c5:d2:48:63:96:17:9c:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:1A:44:A8:88:21:78:EB:7E:C2:F0:F5:F4:7C:D8:66:FD:0D:3C
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:7f:fc:9e:a3:2c:d5:3f:a8:c5:0e:e4:22:12:ab:1f:88:
7a:71:d7:b1:cf:35:f3:b6:b6:58:4b:4a:ff:c7:25:c0:f5:7c:
0e:45:d4:11:78:be:3f:c9:d2:46:ad:63:26:40:c4:55:87:77:
b0:dd:df:1c:77:98:64:60:8d:05:0f:5c:c3:21:d4:5e:90:30:
bc:53:61:20:c8:04:5b:43:b2:d7:53:70:76:71:a2:74:a6:b7:
d5:d8:0c:91:60:da:d4:10:31:6d:30:79:84:5d:0d:fa:2d:82:
7a:b6:ab:f4:a8:15:1a:9b:f4:96:21:3f:17:0b:9f:fd:28:85:
31:e5:ec:80:85:18:1a:14:57:55:7a:07:4a:fe:ed:b7:3e:5a:
a2:6a:59:4a:e0:2e:70:4c:64:56:63:40:b5:ac:70:3b:8b:0a:
23:ab:56:f8:89:d1:dc:59:ed:d9:7f:3c:39:f7:2f:75:05:2d:
56:b4:45:5c:af:03:75:ed:06:2a:a7:e0:36:1f:2e:13:01:7c:
75:87:a1:23:38:29:08:61:05:6c:6e:f0:a2:e7:86:39:9d:d5:
97:50:5f:44:72:01:66:69:6e:21:a5:aa:19:29:c3:1a:b4:e1:
a3:48:f6:c0:77:1e:22:3d:b9:ae:3a:4d:11:5d:40:56:4e:8a:
a5:44:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:34:04 2025 by rpki-client