Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier: OOy4ex3pTI7nOiBWy/J/GMWnJhjvSdDngVpnJ6x7u0I=
Subject key identifier: 09:42:E3:EC:0E:18:43:0B:46:2B:1C:02:B8:4E:2D:EA:58:05:A1:25
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial: 019A72CA8178611889E9F47A0EAE1E584DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: zY9ihu3Jtmh3bOZWQVtqaxuR3zo/QEyfEVABwSN5KqA=)
2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:81:78:61:18:89:e9:f4:7a:0e:ae:1e:58:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=0942e3ec0e18430b462b1c02b84e2dea5805a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:ec:28:b7:1f:92:5f:0d:58:17:7d:b8:0b:
40:b0:4e:6e:eb:c4:6c:f0:39:13:3f:45:d8:43:bc:
6a:00:32:fb:72:66:c1:6e:ce:2f:80:fd:d1:70:d6:
a2:c7:69:0d:44:14:cd:7a:3e:44:fe:d5:94:26:71:
3b:ba:9c:d4:0e:46:3a:37:d7:bb:f6:f1:75:1b:04:
0b:04:f8:aa:10:90:92:0f:b0:14:6d:20:0e:59:bc:
c4:07:c0:b7:a9:4e:0c:2d:9a:fe:13:2d:42:e8:f8:
f4:85:7f:e6:bd:70:1a:55:53:27:ff:5c:8e:99:80:
26:4d:48:27:9d:3f:ed:00:3b:0d:5d:6f:0c:62:4f:
bf:a6:10:2e:a9:2b:13:22:8b:c9:5c:e9:b5:6a:dc:
27:fa:81:b4:77:94:18:66:56:95:e9:f6:d0:19:8e:
11:2a:c6:46:8f:cf:3d:ae:6a:26:60:53:aa:fc:6f:
de:f1:fd:6c:a0:8c:47:05:b8:18:51:60:36:be:2d:
c6:1c:ae:51:07:87:28:69:69:7b:db:02:71:00:f6:
3b:06:ff:66:97:f2:aa:f9:db:41:e4:f3:23:26:03:
63:8a:5b:0c:43:f3:ee:7c:e2:c1:dc:49:a5:f3:2e:
49:1e:b7:2d:4f:0e:40:c9:52:30:64:bd:db:32:19:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:E3:EC:0E:18:43:0B:46:2B:1C:02:B8:4E:2D:EA:58:05:A1:25
X509v3 Authority Key Identifier:
keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:19:10:aa:a9:03:23:22:71:b4:23:ec:8e:95:d1:f2:fd:2e:
6c:7f:5f:4d:3e:80:7f:c6:88:01:1d:ed:c3:f3:38:b6:40:a9:
96:ed:61:5b:b8:2e:5e:12:8c:22:4f:ef:9a:19:20:af:7a:a5:
75:14:4e:46:d9:01:db:f0:f1:ab:f7:65:f0:15:ed:79:0b:ad:
87:73:a9:37:8b:7b:33:12:d5:72:ba:75:69:2a:dd:f7:d2:c7:
fb:51:87:0d:fc:95:e5:71:e9:7a:96:a1:6c:85:b9:19:66:22:
88:20:18:27:4a:cb:54:5a:33:43:aa:d2:98:3f:11:ef:75:90:
b9:45:09:1a:de:c8:de:01:7f:81:42:ff:e2:c4:66:49:6e:17:
73:99:89:7e:ea:5a:95:2a:67:59:74:b2:1d:b5:09:6d:13:4b:
e0:06:a7:6a:34:be:46:76:f9:5e:3d:cc:28:21:aa:fe:62:ca:
ce:37:60:b6:dc:87:89:b7:f2:41:a4:28:f3:15:f3:6d:5c:af:
18:61:47:ea:0b:c6:8c:fa:1e:2d:4a:ce:c3:63:87:db:e0:6e:
31:0c:ff:e3:aa:78:ad:8c:b5:e3:c5:35:02:47:a1:ed:54:aa:
1e:0e:f7:e2:32:3a:0b:69:47:bd:e6:53:70:29:bc:9e:1a:50:
7a:41:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:10 2025 by rpki-client