Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: tT0gif4n2dl5jI2z3f/MdSmvUtPibflTAHphf6/66U4=
Subject key identifier: 82:43:4D:77:EF:3B:F6:73:C2:E8:D5:FE:96:C5:F3:F8:7D:1E:FF:FC
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019A4D3D06CDF97AC9B4BB133D3971537E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 15C5
Signing time: Tue 04 Nov 2025 05:00:36 +0000
Manifest this update: Tue 04 Nov 2025 05:00:36 +0000
Manifest next update: Wed 05 Nov 2025 05:00:36 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: LCalXbAJ5m3c1YBEF75DFUimCUuCzVxBWfBA5pHbsog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:06:cd:f9:7a:c9:b4:bb:13:3d:39:71:53:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Nov 4 05:00:36 2025 GMT
Not After : Nov 5 05:00:36 2025 GMT
Subject: CN=82434d77ef3bf673c2e8d5fe96c5f3f87d1efffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:18:fc:0f:9f:1c:99:84:95:74:22:ef:43:
2a:60:2f:2b:f7:04:b4:55:c4:3e:a8:1d:6c:9e:10:
7f:47:86:7e:74:cd:7b:63:60:4b:07:f5:a8:c8:a4:
16:c5:95:21:18:16:35:c0:fb:bb:5f:cc:3f:86:89:
71:9f:56:60:99:83:43:c7:c2:8e:12:4d:f5:48:da:
8e:08:fb:60:ec:12:34:68:22:0b:76:76:a1:e7:4b:
2d:8d:8c:5f:e6:aa:24:a0:cb:a7:45:34:79:49:74:
98:83:34:2c:5f:cd:56:a2:8f:21:9d:00:d4:79:84:
a0:d3:17:5c:4a:34:72:4a:6c:f0:71:7d:59:6e:8c:
7c:e2:c9:ee:40:57:70:eb:8b:81:69:72:8d:4e:d4:
fe:b2:bf:81:1b:74:cc:2a:5f:57:58:f9:69:86:e0:
41:5f:d6:c5:65:69:43:03:b7:8b:54:04:91:3b:55:
6e:c3:8a:24:c2:67:26:da:15:95:36:9d:f9:b1:ef:
78:5e:f1:5c:17:61:be:b8:3a:e9:9f:5c:eb:c8:81:
bc:b1:af:6f:e8:f2:73:23:ba:4e:82:97:04:a1:bb:
63:05:2d:05:5d:56:5c:81:94:4a:6e:4a:02:5b:4e:
45:e0:0e:54:db:81:a8:11:8d:ff:bd:3f:94:d9:52:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:4D:77:EF:3B:F6:73:C2:E8:D5:FE:96:C5:F3:F8:7D:1E:FF:FC
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8e:ba:84:a8:81:67:a6:00:36:1a:b0:17:5b:18:57:58:2e:
86:4a:5b:0a:71:bb:87:04:d5:5d:bc:3a:0a:4a:0d:0b:8e:d5:
68:4a:01:4b:ae:55:34:1e:7d:71:65:20:08:d1:02:f8:94:43:
d7:af:c9:9d:0b:e3:22:14:bc:09:9a:3e:fb:32:81:07:67:73:
e9:58:0c:a1:7c:7e:5f:43:10:b5:ff:8b:4a:b8:cd:3d:9e:4c:
43:e8:a2:d1:7c:2f:47:d4:61:23:cb:a1:f7:04:de:39:62:c6:
49:cf:de:94:2a:70:eb:13:7b:39:d4:ce:ec:dc:15:94:84:2f:
67:c7:a6:91:54:ff:d1:35:ee:f3:d7:ba:24:9b:58:4f:4a:5a:
7f:a2:c3:a5:1a:44:38:a4:f3:2c:15:5a:4d:cc:3d:20:cc:36:
0e:b4:a2:48:ad:00:58:a0:86:3a:aa:b8:5d:f6:f3:17:91:33:
9c:43:f6:22:69:50:f6:75:ee:4e:4f:62:b5:fc:7b:b2:6e:eb:
ca:cf:ea:c3:72:77:ff:39:f1:3f:6f:1b:d6:24:93:d3:9a:3b:
39:33:e2:17:35:af:58:25:37:6f:a6:59:61:19:03:8e:99:6d:
7a:58:41:2c:dc:73:18:da:4c:66:d6:7f:76:bb:be:65:96:89:
63:79:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:48 2025 by rpki-client