Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: WsT1mYX+liVsEQcZTgXzgXQfpdoCNBJkJMbJQ/oQvP0=
Subject key identifier: E5:F4:B8:77:CC:B2:1A:EE:F8:33:EB:CB:80:FC:1D:A1:09:6A:2A:1B
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019A725CCA867ECA318B8325063A537C006B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: dey1bmRkeuLPjxmvzaXkCs6GKjwN8C+y6Q+lnZgQ7Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ca:86:7e:ca:31:8b:83:25:06:3a:53:7c:00:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=e5f4b877ccb21aeef833ebcb80fc1da1096a2a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:77:95:f2:da:bb:9a:00:db:6c:44:c9:c7:
1a:9a:98:10:6a:0c:74:d8:9a:08:0f:7a:06:d1:5c:
56:c8:14:84:75:45:9e:d2:28:61:24:90:18:6b:b3:
37:cb:34:5d:83:c7:10:71:cb:12:eb:34:53:f4:84:
f6:4c:2e:e3:85:da:d8:3c:e3:78:4d:bd:07:66:3c:
31:7c:26:5b:1d:6d:9a:44:d7:68:bf:c9:19:f6:22:
cb:48:ed:7a:00:0c:df:12:64:8f:64:9a:35:8c:fc:
3f:28:d1:f3:13:42:ba:9a:8e:63:45:5a:d6:9f:96:
8b:be:a8:22:af:d0:ae:d2:39:77:96:02:dc:a0:8a:
a2:78:b8:1e:4f:a7:f3:2c:89:7f:1b:a8:b8:70:10:
4e:b2:16:8b:22:2d:90:04:67:91:72:5b:d3:a0:ff:
9f:62:80:01:cf:8c:8c:de:b9:aa:05:48:5c:48:53:
c6:c5:33:a2:ab:51:3d:7f:57:c8:56:25:2e:03:37:
dd:4b:b9:12:06:38:e8:86:a9:46:0c:c1:71:58:78:
97:bd:b4:3a:e5:0f:51:0b:44:21:63:f7:35:55:b0:
6f:32:db:a1:79:96:a7:52:4d:82:7c:3d:d3:3f:a3:
02:6a:71:81:17:e3:4e:95:ff:b8:74:3a:d6:8f:ee:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:B8:77:CC:B2:1A:EE:F8:33:EB:CB:80:FC:1D:A1:09:6A:2A:1B
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f4:8a:20:68:91:79:62:91:30:3a:59:5e:09:0b:ef:e6:60:
4d:c1:d4:aa:3f:37:ec:35:c7:9b:fb:2e:f7:ca:59:25:b3:01:
fc:c1:f2:ff:40:54:d7:f7:1f:b5:54:e3:b2:6a:78:37:64:cb:
d2:d0:f0:87:01:17:51:fd:ac:43:7f:c1:bc:02:48:7c:46:8b:
57:b2:5d:ae:3c:d8:c1:dd:fd:e5:e8:a0:00:cc:97:20:4b:e5:
ee:f8:57:b0:49:c0:06:9b:ac:3d:f2:44:03:85:e2:44:48:d2:
ab:be:d5:a7:df:2b:3a:09:fa:02:54:6d:5e:8f:8b:7e:51:a9:
95:fb:29:43:80:3d:3f:2d:c4:84:8c:5a:07:6e:23:87:a7:23:
27:4b:05:e9:84:f1:6c:78:9d:90:3e:f4:fe:aa:95:8a:e3:8f:
af:ae:fd:70:b8:b1:a2:50:95:09:a0:68:ae:8b:75:5f:dc:08:
62:f7:35:ac:c7:47:1b:d9:31:1f:69:24:d1:38:5c:a5:5f:1b:
66:ab:f6:8a:26:2a:08:13:39:d2:9a:f3:4c:ba:fc:bb:df:c0:
1b:19:58:59:c6:0e:81:4b:f8:c4:8b:d1:0d:f2:99:e9:52:32:
8d:73:e2:6d:b7:9b:d7:7b:61:45:c2:b9:49:28:b0:49:29:d1:
62:d7:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client