Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: T7ijxL5HKZCKWOA3CGbSn6ev4MOsH8s2dzNpDoEdbgI=
Subject key identifier: EA:69:F2:F9:04:40:24:B1:70:94:AB:0F:8B:FC:35:9F:E5:18:30:9E
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 019A725CDAD9B7D8FF0ED4FA1A70F24C3217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: JyMuOeiu9t2JS2D9gHDpmvQYsgjG/Dbpxft8KVtTTco=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:da:d9:b7:d8:ff:0e:d4:fa:1a:70:f2:4c:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=ea69f2f9044024b17094ab0f8bfc359fe518309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:44:9f:01:f5:16:ed:c4:44:68:89:4c:22:
32:60:52:26:b4:43:33:21:b8:74:26:50:f9:7b:25:
23:a8:f9:d8:de:e6:d3:47:63:a8:1b:78:4a:f1:50:
c2:bb:09:6d:f5:36:9a:9d:43:11:ba:32:68:d7:f7:
91:c1:aa:d8:cb:0e:b2:78:98:65:8c:6b:69:9f:a8:
b5:b9:1a:fc:ac:62:9c:ff:d5:65:2f:f9:12:cb:49:
4c:85:10:c8:5f:10:05:85:20:8d:7f:d7:95:49:b3:
7c:28:b2:b0:31:49:56:4c:ef:cf:55:1d:65:9f:f4:
a9:01:48:1a:89:31:34:ab:94:fd:0c:a7:dc:9e:21:
00:0b:08:04:15:35:54:4b:b0:c5:59:2c:92:d9:4d:
94:6d:d0:ed:b1:2d:ae:65:33:8d:f6:24:8c:44:c9:
78:20:8b:96:03:71:12:43:4b:1b:d6:c6:91:12:cc:
4e:c2:0f:f6:7d:a4:01:09:b6:21:a8:ec:76:d7:2a:
a8:cb:bb:12:ce:99:de:b7:ce:a4:d9:f9:9c:5c:da:
e4:5d:76:bd:eb:1f:b4:f2:81:b3:66:64:04:75:38:
b2:8d:87:db:bc:e2:7a:81:80:10:c9:3c:9b:90:d3:
c1:be:e2:ed:ba:22:93:f6:5b:fe:13:b4:ad:14:55:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:F2:F9:04:40:24:B1:70:94:AB:0F:8B:FC:35:9F:E5:18:30:9E
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:c3:48:cc:b3:a3:a5:31:5b:8b:38:83:83:2f:ad:5c:85:
64:27:34:4c:18:1a:96:41:b1:3a:41:1f:21:58:8d:b5:f5:ed:
d0:b4:b9:03:4e:0b:4c:db:b5:5d:13:62:ca:6f:67:91:1b:09:
81:9d:dd:88:e9:1a:fe:6d:42:c0:71:b0:84:1d:bb:c2:c3:e1:
04:80:4f:1d:56:4d:0f:53:16:15:74:a9:c0:ca:02:c9:ed:32:
50:3e:f2:1d:c4:b7:ae:16:0f:85:75:73:57:23:db:9b:7f:7d:
1c:bd:dc:fd:ec:be:3f:59:7e:3b:fe:73:f3:e8:b9:8c:36:f8:
6a:41:de:9b:93:d3:a2:17:df:69:84:e9:b6:c8:ec:45:18:16:
4b:01:03:4e:e2:58:98:ba:65:bd:72:9c:38:1f:43:6f:6e:a1:
17:88:40:51:a3:e2:66:97:b5:a4:4d:9c:29:40:59:20:d3:2b:
18:de:56:93:eb:5b:a0:8f:de:09:d3:4f:ba:b8:7c:e2:d7:e3:
76:d4:2f:ec:16:72:5f:1f:31:8d:f8:94:6e:3e:9d:2d:fe:93:
cf:f2:5e:86:a6:c1:1a:9e:19:02:7d:b2:cc:d3:20:2e:d8:a1:
b6:28:d0:f4:f3:a4:f0:cf:b2:1e:25:58:1b:44:2f:8a:3a:38:
26:af:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client