Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier: E/y/H1lEzYme8A7yHNXg2QB6cjbiiClWobr87NFbvZE=
Subject key identifier: E0:0C:AB:A8:25:35:0D:5F:6F:F4:B2:64:95:08:F0:B5:25:46:01:D3
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 019A7112BD5C241B809C1996129733AF781B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number: 08E2
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: RM/Elcoahjv2Kwwzv0+bG/89rXmACvwpLdcCN5+s3ew=)
2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:5c:24:1b:80:9c:19:96:12:97:33:af:78:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=e00caba825350d5f6ff4b2649508f0b5254601d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:7f:89:af:0e:23:fd:ec:e7:69:3f:2f:27:
fc:b6:d9:bf:7b:05:d6:a0:47:ba:a2:8d:05:46:1d:
af:1f:6c:f6:96:f2:f5:22:00:f2:6b:50:87:5a:63:
3f:ff:8c:84:2c:83:2e:41:57:2b:45:0b:80:95:c1:
72:cd:62:20:d4:50:31:79:b3:29:c0:b9:1e:26:79:
e0:23:1c:c6:ac:5f:5b:21:aa:e3:af:16:0f:3a:ca:
e7:4a:02:50:79:94:76:c1:ec:dc:26:93:35:8c:3d:
43:a8:70:d6:f9:77:d4:c0:68:5d:d3:c0:f9:7f:9f:
7a:2d:20:4c:f1:ea:c0:bc:20:c2:8c:12:49:9d:59:
7c:74:76:f3:9c:88:c6:2f:64:07:6a:df:34:bf:6d:
db:42:19:2a:a4:84:7a:96:7b:8a:d8:bb:4d:c6:7a:
d5:f4:5f:16:8e:32:20:25:53:8e:a5:f5:2f:b7:5a:
b6:34:27:52:31:25:c3:ee:aa:07:8d:eb:24:cd:bb:
09:74:95:46:54:fb:0b:c0:1e:f7:27:ad:c8:2f:86:
3c:d9:8a:e7:0e:56:3b:ab:ef:15:77:03:0a:10:d8:
07:5c:0b:d3:a5:49:c4:b5:bc:ec:c8:af:b4:5d:f6:
12:a3:e4:07:58:57:3f:8b:36:a6:d6:cb:80:b4:c7:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:AB:A8:25:35:0D:5F:6F:F4:B2:64:95:08:F0:B5:25:46:01:D3
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2c:d4:c3:8d:3a:76:34:c8:54:b6:3f:73:87:b5:68:42:3b:
7b:54:3c:bf:3a:33:6b:fb:08:88:c7:0e:5f:c1:c5:cc:5a:9d:
74:5f:a3:4c:9e:54:e8:42:13:d2:43:de:72:d1:4a:39:64:04:
99:e3:7a:33:75:a6:cb:ee:10:82:75:d0:ca:f0:76:52:41:51:
c2:97:6f:9e:bb:f8:ec:82:01:ee:e1:79:dd:04:e0:90:38:52:
52:66:21:fb:8d:2f:b2:71:31:e9:6d:cb:d1:5d:dd:41:90:7d:
8f:36:63:ba:49:05:aa:54:27:65:3a:98:f8:8d:3f:43:c0:5f:
ba:46:77:26:4c:ec:98:33:bc:20:47:9a:a9:40:a8:63:af:da:
fa:26:fe:10:55:60:4d:ac:c4:87:2a:4f:2d:fc:60:32:0d:66:
af:80:da:83:2f:70:bb:3a:b3:61:38:cd:80:ea:e2:9a:f2:dd:
17:a3:d4:da:bf:fd:5b:27:9a:ca:97:27:99:32:af:4e:ec:2a:
63:eb:15:81:36:b8:b2:1f:e8:fd:c9:95:97:85:91:ba:61:a4:
57:4b:66:c8:36:bc:ec:8d:17:2a:08:e1:b3:a4:a2:14:65:b7:
f0:57:a4:e6:db:ba:b5:fb:5d:01:53:1e:56:be:65:7c:5c:fa:
2a:65:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:59 2025 by rpki-client