Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: UgwwH2GHbbq+aRVT7+p/Xby07Ab+N+LRpzoVQM9Yte4=
Subject key identifier: 95:88:07:36:52:CA:41:29:8E:1B:7D:12:27:B1:26:E0:D4:EA:02:64
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 019A25F844A701C94E917BEDB52C5B552361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 0588
Signing time: Mon 27 Oct 2025 14:00:18 +0000
Manifest this update: Mon 27 Oct 2025 14:00:18 +0000
Manifest next update: Tue 28 Oct 2025 14:00:18 +0000
Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: /h10xDgZV+88eLPZPkpyEJA35r/MaoMRJXo4AkDhZEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:44:a7:01:c9:4e:91:7b:ed:b5:2c:5b:55:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Oct 27 14:00:18 2025 GMT
Not After : Oct 28 14:00:18 2025 GMT
Subject: CN=9588073652ca41298e1b7d1227b126e0d4ea0264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:dd:06:9f:00:21:3a:3d:79:4d:07:68:d4:
19:7b:56:23:1f:b9:a7:f1:3c:31:b3:50:0f:51:bd:
f3:93:6c:ca:4f:5f:e4:6c:98:c7:29:a9:51:7a:17:
3b:cf:83:09:cb:a9:79:a6:ef:65:95:71:26:56:72:
6a:f5:df:8e:91:6f:ba:89:7f:c3:c2:a0:b0:33:cf:
cc:17:68:d9:19:f4:7b:d0:45:5d:6a:cf:21:7d:b4:
ff:56:04:02:85:c5:82:28:30:b3:36:25:db:8d:85:
24:d1:d5:d9:ae:3f:d9:1c:54:2e:61:fc:2e:12:3b:
1c:df:6a:11:27:62:ee:42:c7:1f:e3:11:1c:53:2a:
ec:82:9a:cf:c0:d9:16:f4:60:a7:01:fd:c1:2b:05:
e0:9f:4a:60:bb:bf:e7:be:e2:a9:e3:50:79:72:ba:
aa:b9:f2:47:59:aa:ab:d3:02:cd:80:a3:c0:10:ea:
d3:90:ac:bc:72:5e:40:f0:dc:b5:bb:5b:4c:57:f3:
03:74:fb:8c:4a:0b:bb:b7:0c:ae:94:da:96:fd:bf:
2d:8f:63:5e:89:46:9f:67:ca:4f:22:dd:c3:e6:d2:
8e:2f:78:d0:e0:40:a1:97:cc:24:d1:94:f4:db:b4:
96:7d:3e:e3:8f:fd:d3:02:08:5e:ef:35:30:a7:a9:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:07:36:52:CA:41:29:8E:1B:7D:12:27:B1:26:E0:D4:EA:02:64
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f1:ce:04:58:34:0b:45:c6:66:56:95:d3:6d:6a:99:74:dc:
2f:6a:bc:e4:2b:93:ca:f3:84:bb:61:9e:23:6d:bc:a1:fc:1a:
40:cb:99:92:9a:f7:0d:fa:08:f4:a2:b8:1d:0f:ea:43:dc:a8:
3a:ce:cb:ef:ab:92:00:39:e5:65:75:e4:47:0f:7d:3a:6a:e1:
c8:c5:2c:9c:37:cf:d9:c2:0a:94:cd:6e:62:a5:d0:61:01:18:
c1:3b:9a:af:8b:6c:b3:be:ff:9c:6d:f9:4e:af:f9:79:d2:30:
60:de:7c:1d:33:f5:1a:7d:73:de:1c:cf:75:2a:bf:ce:2e:81:
b3:ab:af:97:27:ba:9b:28:d1:47:f7:72:64:65:10:2b:52:a9:
c9:36:32:93:51:82:32:73:da:16:b2:96:4a:9d:ec:5f:5a:e3:
22:bc:8b:02:6c:4b:68:53:a1:98:d1:4f:dd:8a:0f:96:29:b0:
33:57:0a:eb:14:42:16:5c:13:4e:20:eb:a3:0a:fe:30:c4:b0:
5d:31:33:58:8e:3a:4f:9b:51:91:23:e4:43:84:45:2c:c2:b6:
cb:4d:bb:23:03:ef:41:a4:d1:f9:25:de:58:8e:13:a0:dc:d0:
29:e0:3e:56:f4:a9:77:95:0a:91:61:67:4f:63:ca:e7:8f:ac:
41:81:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:15:14 2025 by rpki-client