Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: 5H4enxHsf3Bslfh91DHsOF/tWgy/+DIPyBI3NPfmynQ=
Subject key identifier: B7:69:E6:E1:79:56:05:E7:5B:77:8E:F5:83:DA:8A:E7:0C:0B:F5:0F
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 019A7149A4BA681377A2EDC74F9CB4366BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 1203
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: 1-oMFTx8B3lukMNBvWfS47n97CmA.roa (hash: m9rVIDnRYZoBIXBcOLquTYp9zMM2moDhJAmWdarMX5o=)
2: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: oMFUNOmK9qqhx/MFN3AQXfZ10ATl0foueLAnZqgY+x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a4:ba:68:13:77:a2:ed:c7:4f:9c:b4:36:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=b769e6e1795605e75b778ef583da8ae70c0bf50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:33:6d:9d:4e:01:70:d7:0b:00:3b:2a:0a:
ba:c7:81:d4:f2:7e:1d:d8:ef:a3:2c:5c:fc:f2:0e:
bb:bd:fe:31:12:0c:96:66:e5:06:5b:38:f6:c2:a5:
87:b2:51:da:b9:87:5e:1e:3a:46:55:61:ad:1f:2e:
bb:76:6c:9f:54:e6:70:4f:55:c8:d2:c5:8e:76:d8:
18:38:97:2c:3f:2a:ac:c7:79:10:02:18:e8:1b:4e:
06:ff:b2:d2:75:e9:5f:77:4e:b7:82:47:39:1c:b0:
de:74:21:5f:45:13:e6:2b:24:3b:2a:09:5a:b4:04:
75:9d:7f:33:2c:1e:20:fd:f4:b6:9d:87:76:57:f3:
8e:59:6f:f4:f7:38:b5:68:87:79:c6:8b:76:f3:07:
c6:fa:43:83:37:29:23:0a:69:9e:ea:8b:0c:6d:53:
fd:a1:a9:68:5d:3c:2d:7c:3e:27:32:a4:1e:0d:90:
5e:59:a0:b8:26:7b:18:f4:69:e6:42:64:ec:a1:4b:
20:9a:5d:14:e7:c2:6e:0d:c8:30:ca:81:cb:73:cf:
26:0f:03:c6:87:25:f2:3b:d4:86:a4:5f:5c:70:16:
0b:7e:80:21:15:c5:53:61:a7:2f:0b:54:e3:ff:20:
4b:e2:64:2a:8f:51:ab:67:05:0a:b5:71:6f:59:a9:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:E6:E1:79:56:05:E7:5B:77:8E:F5:83:DA:8A:E7:0C:0B:F5:0F
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a4:cb:88:56:90:60:50:1d:e8:48:c4:a6:5d:42:c9:f5:2e:
45:d8:e3:83:3d:36:c1:1a:38:ff:38:3a:a6:ce:46:99:0b:0a:
c8:67:2e:f0:df:bc:03:a8:f4:10:8c:64:d2:06:a8:98:6c:54:
46:b6:37:8f:7d:32:97:95:55:cb:b7:6c:03:21:6a:2d:0d:6b:
8b:2e:e9:c6:48:fe:66:34:7b:e5:f4:bf:48:3a:c6:70:76:ce:
0d:90:81:38:5c:ea:8c:fa:b9:ab:20:92:05:04:f2:a4:e9:5c:
db:25:8a:65:02:98:14:df:04:e3:ff:b6:d1:85:ef:3e:cf:e2:
bc:73:fb:fe:e0:0d:7d:83:96:a3:cb:52:bb:6d:b7:f8:ed:05:
7f:78:59:91:e4:bb:fd:41:63:d7:51:c9:cc:9f:08:73:da:e1:
2d:68:35:88:a7:84:fb:7f:df:8e:38:c2:14:02:30:50:4f:ae:
4a:75:0f:60:b8:94:54:da:36:f8:1b:87:2d:e4:1a:8c:ab:3f:
b4:7d:0e:90:43:0a:e6:fb:5b:5e:6c:34:11:4c:41:8e:3b:49:
61:2a:99:9a:83:1d:b2:18:7d:6d:6d:e9:c2:f9:a8:78:f1:ef:
fb:57:5c:7a:0f:dd:a0:87:88:76:cb:89:cf:36:b7:45:5a:b2:
ba:8f:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:01 2025 by rpki-client