Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
File: 5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json)
Hash identifier: J68BUfU3hrW15doxG6uVzQmRoeEiQbHHCCVC/Keitv0=
Subject key identifier: 4B:A7:D7:6E:1F:60:78:E6:52:7F:EB:D4:04:17:D7:9C:66:B7:65:8F
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 019A71B7A479990A3CE263C3AFB1F14BD966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
Manifest number: 0D97
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: pcmU97sVGjjOQwKLhAobmn8bQ0dWvufaqECT2l0/RqQ=)
2: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=)
3: lX6hj9K_SgWpbjs9Vm4h-iLqKxg.roa (hash: sh68gHRxqa7fIqQfLrHiW3Yb8Ld23ANUs7IVCd+duFY=)
4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=)
5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:79:99:0a:3c:e2:63:c3:af:b1:f1:4b:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=4ba7d76e1f6078e6527febd40417d79c66b7658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3c:a6:2b:be:83:86:d0:3f:04:d5:54:5c:a6:
be:24:2d:14:e0:51:36:82:96:e8:ba:8a:96:e7:4a:
f9:84:45:29:06:cc:77:cc:13:54:71:84:ce:5d:30:
47:7c:71:aa:e8:33:ee:7e:95:fa:18:88:11:06:42:
32:9c:2a:a7:42:b8:cf:33:19:da:6c:c0:c5:a0:34:
b7:3b:04:ad:ff:09:b6:cb:56:82:0f:86:76:a7:d9:
64:d2:ac:67:75:a2:ef:6f:69:5a:df:6a:46:b5:6b:
20:ae:da:11:79:c5:94:1b:9e:2c:42:8f:de:0b:26:
a2:da:bb:24:5c:33:23:10:36:1d:5a:0e:f6:ba:cd:
ed:eb:3c:e9:b7:29:b7:7d:d9:6c:4e:00:11:ec:22:
6c:fb:50:a2:f1:c9:ba:6a:a1:35:a0:bd:13:8a:02:
eb:d8:dc:b3:ed:dc:d0:fe:94:4a:91:07:64:81:b1:
62:58:d2:0c:2f:49:e6:08:ca:fb:08:31:2a:73:a5:
20:b8:9b:a6:9b:bc:9e:1f:68:5e:96:5b:d3:1a:a7:
b9:93:1d:19:9d:7b:02:0e:c0:59:1c:dc:3b:58:ca:
a3:4f:25:45:37:0c:2a:bf:71:3b:03:38:28:33:c9:
78:cd:43:96:e0:12:77:59:2e:ca:b1:3f:20:ba:8c:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:D7:6E:1F:60:78:E6:52:7F:EB:D4:04:17:D7:9C:66:B7:65:8F
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:c1:9d:a0:76:9b:a3:63:77:e2:84:0c:ac:e1:68:1c:6e:
88:fb:1c:1a:68:46:22:79:b0:69:70:2f:4e:fc:28:04:af:a5:
df:96:4a:6d:3c:93:70:c2:e4:b0:f2:33:96:36:89:60:93:b0:
c2:28:d8:34:38:53:f5:2f:ae:45:82:1d:ee:27:4d:08:7b:10:
e1:a7:77:b3:ff:51:1a:94:3b:5d:90:e1:e4:c9:fa:2e:bf:d9:
fe:f1:20:e8:70:a3:a6:3a:e3:7c:63:80:13:20:aa:f4:91:4b:
86:95:28:63:12:99:a5:de:7b:41:36:18:b0:a3:94:42:b7:cd:
84:c6:41:3a:f1:86:0e:a4:f4:af:ef:a4:6a:65:87:cf:6f:90:
6d:6d:44:89:09:33:29:e9:c5:bf:99:9f:5e:26:97:6e:b7:f5:
bf:6d:b1:a6:d9:5b:fc:91:64:de:9d:5e:38:20:f2:00:d4:f2:
42:3c:bc:3c:31:58:3f:90:a5:78:f3:fc:65:cf:8e:f0:04:8c:
90:d0:12:fb:a3:75:21:01:6a:a0:bf:ca:e6:7a:37:27:73:40:
f3:23:08:0c:88:e4:6e:9f:cd:7c:77:c7:ab:75:d8:fb:3c:fe:
d5:db:c2:1b:d1:cb:9a:d1:aa:5b:66:a7:98:8e:67:fc:4d:bf:
43:17:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:15 2025 by rpki-client