Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: PVKXtVWwpanXEJldHggINxBLpdsP8CldI4KEkh3ySjo=
Subject key identifier: 3B:93:71:F9:61:CC:39:7D:A5:9C:0E:AC:66:CD:AF:A2:36:F8:CC:F2
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019A70DC33F84EA2CA6666B92EC0DE57796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 064C
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: ThdZwqjneVho/veojWyLi7Gn8dpD0fmhxWTdZuBFOd0=)
2: XdhbDlsmi-wLrPkew-d4TMCD4uQ.roa (hash: GZ7CAjXYNkyYQQ/5CpNjIQ4FPx45ItKMUE3PHSgxPGM=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:33:f8:4e:a2:ca:66:66:b9:2e:c0:de:57:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=3b9371f961cc397da59c0eac66cdafa236f8ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:eb:5e:72:82:76:46:47:23:79:88:91:84:
e8:7c:8a:8c:fb:68:88:2f:68:c5:ed:48:cc:0e:b4:
90:30:a3:89:0c:97:ed:c5:6f:54:b5:c6:83:cb:5d:
1f:e3:5c:7f:19:ba:62:17:bd:5e:c2:80:33:17:19:
c7:70:57:61:e4:43:3f:e2:18:26:10:e5:93:af:cb:
9b:31:c6:ba:87:8f:60:a9:37:6f:e6:41:45:7c:2f:
c6:b7:c3:b2:6b:53:96:23:92:1c:d7:46:5c:b2:00:
db:57:87:e5:e9:95:68:2e:3f:8b:27:b2:7c:75:2d:
3c:1d:3b:2e:33:7a:7e:6e:8c:46:46:8d:7d:dd:83:
82:85:66:28:2c:78:04:b3:4e:c3:5d:68:5e:27:19:
9c:8b:eb:9c:d8:36:a4:4c:13:be:66:22:ec:d7:51:
1e:1c:03:9e:d2:f5:43:2c:ba:b8:0e:a8:67:5a:e3:
d7:ce:a0:3b:22:1c:d0:4b:5a:38:d1:70:0b:89:4a:
7a:72:28:16:91:84:89:be:bb:ce:5e:a4:7a:ef:80:
60:c3:38:47:cf:56:f0:d3:d5:36:b8:f6:14:7a:d5:
ef:c0:32:09:65:5e:89:07:64:5e:ac:cc:df:bf:66:
db:11:b3:90:45:f2:d4:a5:7a:e9:7f:f6:da:4c:83:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:71:F9:61:CC:39:7D:A5:9C:0E:AC:66:CD:AF:A2:36:F8:CC:F2
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:25:b4:8b:80:4f:ca:db:db:57:3d:8c:a2:f3:41:eb:94:
2d:c5:54:0c:95:e0:90:38:3a:a8:ec:d4:b0:48:a0:9f:0a:43:
aa:43:47:e5:16:84:92:78:24:09:23:4c:a2:c1:31:19:b3:d1:
38:4e:7a:bc:91:33:e1:81:c1:ce:90:b1:9b:18:b5:cd:9d:6a:
d2:82:72:1b:a5:0d:a3:ff:f3:71:f7:f2:cc:f1:ff:bb:90:5c:
90:d7:bd:82:13:fa:ab:53:da:59:66:c3:b7:ef:7f:11:4d:62:
63:01:21:13:c7:5d:b8:c7:f8:44:54:1b:07:92:2d:c9:35:d9:
6f:04:59:c9:c5:94:d0:5e:fb:73:25:77:14:ba:33:b1:dd:23:
e8:d4:e6:53:0d:e4:49:bd:de:bf:dd:4b:e6:b0:f7:b2:e0:3f:
ea:29:71:c7:ed:62:af:b0:ac:63:7f:d7:b8:a1:d9:3a:29:63:
f2:25:31:55:e3:e6:04:2a:64:45:cb:04:a5:15:7c:c6:7b:e1:
10:05:f5:a2:04:5e:af:d5:44:b3:40:23:38:92:75:51:16:6a:
71:be:0c:89:75:1f:26:6d:a4:dc:a1:cd:14:ad:50:f0:ba:72:
1b:48:19:94:b7:82:34:9a:09:75:3e:72:d0:32:9a:a6:8d:38:
88:cb:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:40 2025 by rpki-client