Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File: 5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier: jivv2XzwfgXFim2ot0+6ihGBgGsLb5n4ZB+x0U54yVI=
Subject key identifier: 2E:F0:6E:BB:3C:B1:13:ED:B4:52:B5:AA:1F:E9:40:5A:26:44:F5:DD
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer: /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial: 019A71B780439F495BDE62D7C8ECE758E857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number: 113A
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: 8U5f0IrS5A8EcYYf2FmgRDYwg83mcWd6xA/OJg4MHRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:80:43:9f:49:5b:de:62:d7:c8:ec:e7:58:e8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=2ef06ebb3cb113edb452b5aa1fe9405a2644f5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:52:9d:4c:e6:b3:03:9c:3a:13:ec:a3:39:
5d:7a:f6:5b:ea:21:3e:0d:4d:c9:6a:e9:18:ec:28:
bc:29:95:c2:86:c2:ff:a4:1a:39:78:ac:6f:32:32:
97:13:bc:3b:27:da:8e:23:f7:d8:ca:bc:14:2a:16:
a9:0f:3d:b5:d3:30:a7:cf:85:bc:ff:67:11:5b:fa:
59:51:65:7c:4f:a7:55:14:c5:b5:1c:de:16:10:91:
57:ec:e8:8e:b1:c2:a3:47:a3:29:13:8e:2f:31:e2:
6a:8b:0e:bc:88:85:f7:e3:c9:c2:50:83:32:50:70:
06:29:a5:19:56:cd:b3:2a:fe:bf:b2:1f:4c:1a:21:
82:df:b0:f4:f4:8d:17:db:a5:e8:97:64:3a:07:f4:
6f:9b:5d:0e:c8:6b:24:fd:51:57:24:d7:85:67:01:
e7:0c:d8:15:82:9f:64:77:a7:a4:e5:c0:f5:46:1b:
d8:bf:06:8a:6d:8c:2e:32:f9:18:98:c1:cc:a6:95:
62:eb:66:e2:cf:68:de:c4:c0:04:7e:cb:44:c5:ed:
b6:31:2c:0c:3d:ae:53:7c:ee:4d:d1:3a:69:71:67:
d5:70:6d:31:5c:94:37:96:c0:e1:bb:01:b4:f7:e8:
a9:77:75:e7:41:6e:a8:af:da:80:90:53:12:4c:95:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:6E:BB:3C:B1:13:ED:B4:52:B5:AA:1F:E9:40:5A:26:44:F5:DD
X509v3 Authority Key Identifier:
keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:e1:82:d9:b6:d0:b8:0c:d9:9e:0d:a6:8b:5c:84:5a:de:
06:32:f5:8d:a7:91:b4:6a:d8:a7:3d:f1:30:40:02:69:14:5a:
23:f1:2d:8c:4f:82:25:8f:1f:3f:bd:35:73:a3:d5:94:90:06:
2c:02:87:ce:a6:3f:d5:8f:2d:60:e7:a7:e7:b2:65:7d:6d:4b:
6e:98:d6:d3:42:81:c0:36:98:ef:4f:e1:df:9b:e0:4d:6a:38:
02:a6:ed:67:84:4d:98:93:b4:46:04:c5:9d:d4:96:06:1e:d9:
a4:26:82:1b:31:5a:67:03:13:92:2a:53:1b:3b:04:b4:09:35:
c9:b0:f8:bc:fe:9e:ea:15:03:8b:45:36:c8:5e:eb:68:a7:69:
89:97:63:fd:4c:5d:26:2c:0b:b2:db:6a:d2:39:fd:9a:c0:1f:
0f:24:f5:4d:a3:58:ba:13:ec:7f:24:27:d5:ae:5d:60:4a:99:
45:c1:82:25:8d:fd:02:e5:b5:24:85:82:21:cb:0d:a1:8d:c3:
ec:94:29:21:8c:71:57:c3:0d:6d:66:b4:77:06:2b:1e:a7:41:
85:f3:2a:b8:30:a7:90:90:97:73:6e:19:30:8d:28:12:75:ae:
71:d9:36:a0:9b:ef:68:30:97:7b:62:92:ac:db:40:4e:a6:da:
e6:99:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:50 2025 by rpki-client