Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier: Bshsu/SyjNzLP1zEtyhxPUg49AYuf9K5+XiyvIw9mpI=
Subject key identifier: A6:9A:5F:14:D4:54:E6:3E:9F:E6:87:9A:01:26:33:0B:B8:AE:C6:9C
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial: 019A7112C8A85004A86D45395DE88EBE0D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number: 065B
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: ajGfmPvBYzy0hJd5Vldoz3hIrbckM4YxTg0VWm/pn2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c8:a8:50:04:a8:6d:45:39:5d:e8:8e:be:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=a69a5f14d454e63e9fe6879a0126330bb8aec69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:0d:9b:90:54:0a:e9:d9:46:3c:aa:83:c5:
df:47:c5:1a:09:7f:ab:ee:46:9f:89:ec:da:de:a1:
38:9b:e1:a3:f2:e0:f7:a6:55:23:60:0c:51:d7:ee:
d9:da:38:21:06:02:85:fa:f0:58:3b:26:58:8f:6d:
ed:f6:41:33:22:23:5c:b1:11:c7:b2:7c:d7:97:6f:
6f:6f:d7:d6:ad:fe:15:12:bc:79:5d:96:92:cc:7f:
25:fa:df:ba:6f:d1:68:62:2d:93:0a:89:7e:b3:71:
75:3c:61:35:70:f6:cc:f8:f7:51:63:6e:3d:8a:5a:
44:3c:b0:76:48:98:2f:9e:a4:97:7b:d0:ea:2e:52:
bf:04:80:98:76:95:9a:7d:fc:62:65:51:fc:5a:1e:
c3:be:2b:96:a1:fb:72:74:a6:e0:55:61:e9:5c:52:
2c:53:f3:11:27:96:5a:23:82:4a:85:94:24:13:40:
23:07:fa:da:57:9b:ef:21:82:69:ec:4b:3e:85:df:
32:5b:bc:1b:23:82:01:24:bd:11:b6:a5:ea:04:4a:
35:76:73:67:0e:d9:38:ea:71:af:f7:37:58:e5:61:
c6:a6:e9:a1:16:13:93:83:03:9a:65:8e:b6:9c:69:
43:16:5a:b8:23:ee:fe:a3:87:e6:05:0d:1f:be:ac:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9A:5F:14:D4:54:E6:3E:9F:E6:87:9A:01:26:33:0B:B8:AE:C6:9C
X509v3 Authority Key Identifier:
keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c6:69:a7:cf:db:d2:e9:c2:87:62:4d:89:6e:a8:d6:3d:63:
61:8f:2f:23:1f:e3:8d:50:e3:2b:63:3a:28:61:41:3d:51:57:
be:0c:02:7d:79:1b:66:a2:c1:d1:86:ac:02:93:eb:0d:cf:9d:
5a:8b:38:32:75:23:e7:0a:62:12:45:69:ce:34:8c:0d:b4:9d:
be:20:4c:55:c7:4b:af:a9:c0:9c:1c:a4:3a:7d:88:d9:20:4a:
ab:3c:0f:e5:8a:4d:67:0a:69:8e:43:fd:04:6a:02:d3:86:f1:
08:cd:49:2e:99:e0:90:11:61:33:7e:4d:a7:9b:b9:f8:8b:40:
06:7a:36:d7:7a:be:49:0e:41:c0:90:08:84:42:8f:0d:5d:6e:
16:88:48:57:01:80:5d:f4:a5:5a:bf:39:b9:ff:e7:19:fe:ee:
3c:a2:e2:3c:82:aa:ec:41:a9:58:10:95:df:3a:c9:78:e0:b4:
15:a7:1f:6b:b4:16:47:c7:50:bd:bb:86:d6:b2:b4:8e:72:ad:
1a:85:0e:ac:54:10:76:29:ce:6c:21:23:6e:06:6e:2c:9b:6e:
3a:0b:14:f2:ae:5c:e5:8e:5f:00:37:74:c4:f1:ad:a2:c3:7a:
d5:87:cc:5e:9e:0b:15:4f:19:78:0b:29:6d:6e:5a:14:5a:2e:
28:b4:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client