Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: lHjEAbbooDe7zPoI+qz1ax5S1obhFPJWq3kDCwBmay4=
Subject key identifier: 22:D1:B1:55:E4:4B:17:12:38:21:AA:8F:93:F5:5A:F2:EE:2B:87:06
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019A1C50B346B463B804EE2368C3DC2973B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 17:00:41 +0000
Manifest this update: Sat 25 Oct 2025 17:00:41 +0000
Manifest next update: Sun 26 Oct 2025 17:00:41 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: H25r1xWh3l4SpzqqhuyfVxEzx51TswZxHIuKwBx5a5I=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:b3:46:b4:63:b8:04:ee:23:68:c3:dc:29:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Oct 25 17:00:41 2025 GMT
Not After : Oct 26 17:00:41 2025 GMT
Subject: CN=22d1b155e44b17123821aa8f93f55af2ee2b8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:b1:e6:5f:82:56:a2:76:83:c5:24:4c:53:
73:04:92:de:5c:91:a8:97:fc:ba:8b:34:7f:ff:d5:
55:ab:b2:5d:16:c8:36:7c:2f:00:ad:33:bf:a2:ca:
e7:ed:69:ac:fd:75:6e:a9:05:1f:37:f6:0c:60:8a:
14:9c:ce:e8:ed:10:4d:2c:a6:64:29:db:15:5a:d4:
95:6b:eb:b3:75:96:24:c3:01:13:a4:6e:eb:43:52:
d7:4f:04:25:59:3f:d5:fc:9b:9f:13:f2:c8:92:0d:
46:2e:47:e8:05:ea:ed:06:0a:2f:fd:b1:34:ba:22:
23:19:1a:a9:9b:e6:2a:22:3e:6d:39:f8:37:62:b2:
97:c0:0b:7b:e4:7b:74:b4:ca:83:c9:3a:06:9b:9b:
e7:a7:30:f3:c1:52:80:15:74:b7:15:fc:e1:7d:1e:
de:e2:7a:5d:a6:98:b8:3b:71:d8:61:04:b3:b4:e2:
3f:23:32:87:0a:f9:04:fa:f0:32:fa:91:0e:33:06:
9a:02:56:4d:0f:a1:ac:a0:be:8f:c2:b6:a6:4c:8e:
cd:74:3c:b8:b6:b2:a1:8e:d9:0b:49:70:46:5a:7b:
41:b2:65:c8:79:52:2a:48:bc:b7:70:f5:ec:e3:c8:
01:7a:93:64:e5:64:ba:df:89:41:2f:4f:25:cc:c6:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:B1:55:E4:4B:17:12:38:21:AA:8F:93:F5:5A:F2:EE:2B:87:06
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:47:76:4c:6a:3c:cb:12:88:52:8f:b8:7b:b9:05:02:1f:
7e:53:7d:9a:c0:fe:1d:8f:cd:a4:86:9c:e4:90:08:9d:6e:0d:
59:7d:27:10:4b:ae:33:eb:73:d8:51:70:21:81:57:d5:ab:1b:
15:e7:5e:fc:0d:53:24:75:e5:31:06:f9:9b:56:50:b5:e4:63:
8b:97:86:90:4c:85:58:9a:7b:10:fc:4b:86:82:1b:3e:6e:87:
aa:93:f1:54:f8:d8:32:df:2d:8b:af:5c:e8:7b:8d:34:05:16:
17:b5:e1:0b:00:19:a2:52:75:01:ce:5d:69:37:4e:53:6a:a2:
e1:17:92:49:d2:bb:07:a5:66:a9:b9:80:24:12:d3:21:c8:e1:
68:69:18:4b:99:80:51:6d:3a:b8:cd:d5:34:df:17:82:00:3b:
83:6a:7e:7d:48:28:fb:eb:85:d8:85:16:a2:bf:03:92:36:a9:
a2:1e:e6:3b:44:30:2f:ed:2e:a9:f6:13:ab:0c:40:44:c3:4b:
64:9a:2c:18:bb:ba:ee:75:9e:76:b6:50:f6:d4:3e:1b:98:3f:
61:f8:cc:fe:67:bf:35:ca:28:6d:01:d8:e8:08:e1:1f:e9:cf:
86:92:5a:f0:eb:d3:9e:3b:86:ed:1f:af:73:8c:16:13:99:16:
05:ac:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:25:12 2025 by rpki-client