Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: B6ZIiQTzvj68SOT2NIYv4k3VqkM6yJwDoQZ+ESN1ETs=
Subject key identifier: E7:57:F4:66:12:94:71:FC:74:92:61:D2:C0:C7:83:A1:05:FC:D5:08
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 019A72261F0C91925C022BDF7C2CC9882D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 038F
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: EDnUa2zZIYh0PkYbvUPZtvtIEMIel+1SYi31R2sz7oU=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:0c:91:92:5c:02:2b:df:7c:2c:c9:88:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=e757f466129471fc749261d2c0c783a105fcd508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:ae:de:53:81:a5:de:55:f6:03:9c:4b:43:
42:97:eb:d4:82:b3:54:c7:bd:fd:20:22:9f:77:67:
11:59:13:c2:e0:9c:9f:76:be:01:d1:70:b7:e3:4d:
45:de:7b:64:94:89:a4:ea:76:12:4d:4c:ff:80:c3:
7d:c4:ad:64:a6:25:c7:bb:a9:38:a0:02:11:d0:10:
72:cd:46:74:36:45:25:9e:59:21:8b:f8:cb:ba:3c:
9e:7b:99:87:46:5d:22:de:e5:67:26:6a:5f:fa:e8:
4c:66:d4:5a:d4:b5:f0:4e:28:91:04:e0:17:5e:7c:
69:78:7f:eb:2a:4b:bf:e6:43:d0:01:de:ad:bf:cc:
bb:7a:43:5c:3a:92:d6:71:b7:3f:d5:21:32:92:81:
03:70:c7:b7:da:5e:48:fe:24:50:0f:a0:bf:94:2e:
90:33:67:05:a9:8a:f5:28:44:2d:af:4e:a3:e9:22:
9c:33:56:94:9e:1a:05:e1:83:76:c3:1d:c6:c0:87:
eb:eb:b0:ad:ff:82:06:43:02:0c:eb:84:95:d7:ea:
de:9e:2b:88:c7:6b:a8:97:e8:60:b4:8d:61:33:c4:
b8:bd:d2:47:d1:98:77:0e:9d:ec:d7:69:fc:f5:7d:
37:bb:6b:55:e5:3d:a4:b1:65:05:27:b9:5f:99:97:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:F4:66:12:94:71:FC:74:92:61:D2:C0:C7:83:A1:05:FC:D5:08
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9e:f4:3c:2a:96:33:c1:36:b5:24:b9:53:07:c7:6c:81:57:
0f:24:a3:31:d2:85:7a:6c:fa:b1:32:43:ff:15:9b:d7:9f:cc:
92:d3:ac:55:3b:1e:94:a4:4c:f0:ab:e8:a5:87:f7:d8:e0:0d:
8b:90:54:a1:00:81:27:e8:0d:8e:08:d0:be:a6:38:1e:c2:67:
f8:8e:3f:58:b2:85:b8:c7:a9:e0:0b:71:72:e0:c9:3b:70:cc:
dc:1f:15:70:54:bd:a7:f5:e7:e7:10:06:46:0a:51:91:d5:64:
11:01:22:e4:8c:28:8b:06:fb:53:5e:b2:61:e5:98:cb:77:18:
9a:64:3a:7a:f0:09:a8:a4:a8:f8:b6:fb:03:41:94:8f:f8:b3:
53:a6:5f:72:4f:08:d1:25:35:ef:41:e6:78:40:94:43:01:12:
ea:48:69:5b:c4:ee:e3:fc:f7:90:56:7c:4f:ef:e0:25:8a:56:
2b:64:4e:36:ac:94:7f:69:2e:2f:a3:4c:5a:26:4e:05:54:8a:
61:56:a8:06:74:30:21:3a:58:44:e9:d7:01:bd:9a:ae:45:cb:
67:57:a0:bc:a2:20:8d:0e:2c:0d:6b:e4:62:b8:bd:ad:fa:88:
ef:85:ab:20:33:db:ae:02:8b:10:86:22:7d:9f:14:69:76:09:
ff:10:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:49:47 2025 by rpki-client