Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: QhAamxU/fqh5mr/hXBt7ozzEiBQr4tQJjH1oAkaHnOw=
Subject key identifier: BA:D0:DF:E6:65:56:45:EB:A7:F0:31:C8:0B:56:29:DD:85:63:2C:91
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019A70A570E711B2EA73879100E0C10DB1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 02:01:21 +0000
Manifest this update: Tue 11 Nov 2025 02:01:21 +0000
Manifest next update: Wed 12 Nov 2025 02:01:21 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: 8FdcD3uwgcEDCBg9IOcswyMjLtGKQnUQqSqyqMiJbVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:70:e7:11:b2:ea:73:87:91:00:e0:c1:0d:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Nov 11 02:01:21 2025 GMT
Not After : Nov 12 02:01:21 2025 GMT
Subject: CN=bad0dfe6655645eba7f031c80b5629dd85632c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:5c:e5:90:3d:00:af:0f:6d:ce:91:b6:30:
b6:0f:a5:4e:62:17:3a:8f:eb:af:b5:9f:26:93:6f:
ea:8b:56:27:30:c9:73:79:e6:49:ba:2c:dc:51:ff:
14:7c:36:0c:67:5c:9b:00:e3:7d:6a:a6:68:65:ea:
ca:ca:28:8b:ff:64:a5:61:08:65:ce:28:43:a9:da:
bd:13:d9:4c:79:4a:91:1a:68:15:3e:42:b2:51:ff:
2f:51:6e:09:37:b6:7c:8b:83:26:7a:34:d2:9d:d4:
ad:87:51:db:18:9d:ec:ea:dd:0a:23:c9:49:fe:0f:
0a:58:8d:c2:f1:31:9d:cf:97:e9:b6:b9:34:e3:4e:
c7:c6:17:c9:49:3b:cd:b1:45:7f:ba:a2:08:63:8c:
e6:22:1b:06:0d:4d:11:ae:63:b4:c9:39:20:82:27:
2a:4f:e4:25:8a:cc:74:df:35:df:7a:48:89:4d:20:
06:1d:e1:d4:5d:f1:5e:a2:e5:88:01:df:ae:da:f4:
d7:de:34:bf:9b:e7:5c:84:e2:07:2c:f3:66:07:f3:
d1:37:a7:d2:64:c4:86:9c:0b:23:cb:93:9d:19:2e:
b1:72:90:83:79:62:20:64:2d:85:0c:95:1b:25:90:
6f:52:c9:d7:a5:be:41:8a:4c:22:08:7d:98:f5:5d:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:DF:E6:65:56:45:EB:A7:F0:31:C8:0B:56:29:DD:85:63:2C:91
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:50:5d:0e:11:a6:4c:76:17:ea:b4:85:5c:08:b9:46:b3:
35:35:34:33:3b:6b:a2:ff:c6:ad:a3:df:f8:36:e3:49:0a:4e:
ec:86:d8:03:57:be:b1:97:50:92:80:79:10:cc:61:93:02:5f:
71:8f:66:60:ba:46:82:6c:55:89:bc:97:e0:0c:49:ad:6d:1a:
90:06:98:fb:cb:4b:b5:0f:d0:fb:92:c1:04:44:44:82:f2:6c:
34:75:a9:5c:3b:2d:c5:b0:52:85:d7:4f:23:12:4e:12:4e:a7:
bf:08:62:83:55:b9:7c:db:96:92:dd:04:7f:b5:ad:7d:8b:07:
3c:9c:a3:95:16:b0:6f:8a:5a:fb:eb:a0:82:7a:b2:fd:ec:e8:
2d:84:0b:88:c9:28:0c:f9:c0:15:85:27:c8:e0:22:1a:ca:a2:
30:6e:7d:b2:ea:ec:8b:b0:18:63:6a:d3:e4:5e:15:88:ff:bc:
18:1d:0e:71:cd:9d:5a:4e:a8:76:05:89:1b:e0:d7:25:6d:4b:
50:cc:6e:aa:42:62:16:1e:51:7c:b8:b2:da:dd:2c:5b:55:09:
b3:81:29:18:22:a1:b9:42:ea:20:cc:df:34:54:9b:f3:62:8a:
f7:11:9b:d8:0d:6f:d1:56:3d:71:34:c9:a5:b9:a0:87:ab:1b:
df:6f:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client