Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: t2R00tnKotuXo2WVJez5pQnbLjn9zrAmHrDo8A2jlJI=
Subject key identifier: 6C:BC:48:E6:2B:68:61:1E:CC:2C:78:2F:54:1A:BC:F4:CF:42:33:98
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 019A2B1EDCDC640484ED0F7C7414198108BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0A26
Signing time: Tue 28 Oct 2025 14:00:34 +0000
Manifest this update: Tue 28 Oct 2025 14:00:34 +0000
Manifest next update: Wed 29 Oct 2025 14:00:34 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: 3EQxjNy1xG8u7aFXVoNRcpWp2Rfej1OcBHHhImfBf4o=)
2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:dc:dc:64:04:84:ed:0f:7c:74:14:19:81:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Oct 28 14:00:34 2025 GMT
Not After : Oct 29 14:00:34 2025 GMT
Subject: CN=6cbc48e62b68611ecc2c782f541abcf4cf423398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:84:02:85:a0:60:71:3e:10:08:04:c4:5d:ba:
63:c3:cb:a7:6e:47:7e:33:66:a7:c7:c2:e2:6f:0a:
ca:0a:5b:f5:2b:25:5a:ff:a8:0d:5a:06:b3:ce:33:
f4:50:e3:49:50:c7:1a:9e:e5:fd:4b:00:01:c5:fc:
44:e2:d1:47:90:4e:19:6f:4c:b0:90:03:8c:37:4f:
60:5d:89:1d:60:05:5b:5b:28:f3:d4:bd:e1:cf:0d:
84:c9:f2:8a:f6:40:b1:02:87:7f:22:b9:03:cc:a3:
89:c8:80:7c:0e:1c:7b:2b:ef:44:45:b3:a2:f4:db:
e8:14:03:00:9f:3e:ae:ce:e1:0f:64:c6:78:d7:86:
b6:bf:d8:76:b9:72:6c:37:a2:05:04:fe:06:e2:24:
c5:20:e9:b5:34:46:1e:88:10:28:ba:c9:79:4e:d5:
75:03:6a:22:c9:f6:bf:2b:47:e5:5c:58:b5:59:d6:
5c:c1:e3:6c:cb:6f:a6:5f:24:61:ab:26:2e:58:19:
3b:30:a9:7b:d5:28:52:c9:de:77:e7:64:e4:65:0c:
70:bc:20:a7:88:d9:47:08:df:c0:fc:eb:e2:93:da:
51:82:34:d0:42:79:95:c6:f7:67:be:4d:67:0c:81:
63:ae:45:7d:b0:4b:c4:6a:6e:93:df:24:c5:2c:74:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:48:E6:2B:68:61:1E:CC:2C:78:2F:54:1A:BC:F4:CF:42:33:98
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:75:5f:69:c2:6b:02:b6:e0:56:3e:b9:86:a2:7b:2a:47:e3:
ba:7b:df:60:41:49:00:6e:be:2d:81:7e:b8:b8:b2:4a:f9:26:
41:90:c0:56:ee:68:2d:52:6d:45:9f:15:3b:51:ef:21:52:0d:
7b:13:92:6e:fe:d6:ec:67:bb:08:02:ea:35:f4:a7:57:93:7f:
99:fd:f5:8f:1b:c0:5f:a4:11:9d:48:b9:b1:05:e9:85:bb:3f:
f8:35:f7:5e:d5:76:49:f5:07:bf:79:96:a8:1f:34:dc:aa:15:
c9:c5:59:02:b1:23:0d:28:9c:18:ff:0f:30:13:de:95:03:33:
a2:5c:75:20:9f:44:5e:07:86:09:ff:d2:f8:9a:95:2a:5c:5c:
ca:20:f0:4c:24:12:10:0c:76:c7:c7:3d:71:ec:b6:2e:5d:d5:
64:ff:a5:17:6e:94:bd:26:14:57:0f:27:58:15:85:fb:a0:45:
7d:d1:a6:10:3d:f8:5c:c6:02:f0:8b:fa:fd:f9:4a:22:9d:a9:
bf:b3:e4:28:50:92:4e:23:6e:72:9a:84:a9:c9:42:fd:e7:fb:
3d:9b:29:2c:df:86:6e:9e:6d:32:c7:3b:fa:da:99:42:1e:51:
1a:b4:6e:1e:4c:d9:f4:17:d9:df:c9:eb:e2:fa:3d:0b:94:dc:
ef:cb:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:58:38 2025 by rpki-client