Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: Iigy83TzsWQHAM4BRQu+6kNZUhbXgm7e+i1O/fqzpzw=
Subject key identifier: 34:09:33:88:48:7D:54:2C:90:16:EE:33:05:BB:E2:9B:FE:C1:C2:4C
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019A725CCA23FD4E8A664493D6243DA4DD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 0E9F
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: oLcIN0INzLWskDTsMiPVd7iSCO9E1lHZ19W9FKBZI2A=)
2: ook9uIQAuCcVv2Fg0PJ5r3IwiNU.roa (hash: Y/wn2KIY7krXyisLSYMbczx5AjYDM8sXL4TRFNZpN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ca:23:fd:4e:8a:66:44:93:d6:24:3d:a4:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=34093388487d542c9016ee3305bbe29bfec1c24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:87:e0:4f:9b:bc:79:9d:79:c5:9e:f8:30:
5c:3b:61:4c:15:b9:a2:83:6f:13:47:4f:36:4b:4a:
59:c0:61:68:80:ba:62:fe:ba:a5:4a:18:26:35:fc:
ed:1b:c7:56:ea:3f:47:c7:4e:a1:7f:2b:29:2c:9b:
46:3a:4d:01:fb:43:33:83:ce:3a:64:17:60:b7:9b:
d6:89:f4:fa:d0:0a:79:a6:a6:f7:19:a4:ff:44:6e:
8b:45:1b:e1:d6:d7:02:63:61:ed:9b:de:b5:86:12:
b3:86:cb:98:e8:c5:b2:bb:f5:f9:b3:6a:74:45:6c:
13:8e:e1:4b:03:b6:81:9d:c6:96:b5:16:bc:2e:be:
c9:81:a5:88:86:a7:73:34:ac:8a:f1:c2:98:40:1f:
62:3a:98:b2:06:eb:8d:4b:48:57:6f:f5:f4:42:70:
cb:a8:b1:de:f7:90:67:90:f9:77:e0:f7:d6:69:59:
ed:07:40:e4:d0:9c:23:3c:08:56:29:da:59:51:fb:
34:c9:77:d4:9f:1a:f8:15:79:54:45:5d:5c:a5:67:
0a:ad:b1:d8:24:c0:93:5a:09:cb:58:dd:fb:9f:6f:
a3:2b:80:b5:c6:6c:cf:2c:b2:c3:6a:a4:42:24:73:
95:f6:3c:5a:ce:67:85:3a:de:64:c9:d5:52:73:67:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:33:88:48:7D:54:2C:90:16:EE:33:05:BB:E2:9B:FE:C1:C2:4C
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:51:c4:35:cc:96:62:0f:0e:61:a6:ec:ae:64:93:64:4a:
d6:6d:9c:c3:eb:16:ef:78:76:62:64:2d:25:b8:57:32:1c:5f:
42:f7:b7:37:a6:49:7f:3e:cc:82:17:1d:ee:5c:e8:7c:97:98:
e4:5b:19:09:00:99:75:3b:ee:7b:bf:a0:e8:09:03:3a:ab:c7:
e2:e9:83:50:f1:42:15:d7:84:f7:a2:38:e0:9a:03:fb:2b:9d:
7c:99:f2:53:06:d3:56:00:60:01:ab:ea:c4:33:59:fc:a4:64:
47:ed:3b:fb:9c:fa:7b:49:6f:f7:0a:55:bc:9a:0f:51:d6:51:
ae:33:4e:5a:e4:3f:6e:0f:da:d8:67:58:71:6c:a3:b5:3a:38:
94:df:bb:f7:d6:98:25:10:ed:f7:a0:0b:82:d5:99:2d:c5:46:
fe:46:eb:23:24:df:61:4c:aa:23:39:65:d1:cd:fe:a7:1f:0a:
90:55:26:34:da:4a:dd:b3:ac:b6:df:f1:2b:ca:30:32:75:9d:
6f:5f:4c:d2:75:78:74:ec:1e:93:07:0a:49:21:25:eb:52:4b:
63:0b:1a:05:3c:35:ff:30:da:03:7e:db:01:96:ef:d2:a6:e0:
fa:9c:65:e6:eb:89:58:1b:0a:bd:7b:eb:a7:0a:4e:60:ca:de:
ef:d6:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client