Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: Y0aIxXS26ZcSfY0cfZbRG5N0EET85GsDAaehH6d0n6I=
Subject key identifier: F5:CC:2F:8E:DE:B2:26:E5:2B:8F:99:95:68:74:11:B1:A1:79:87:FC
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 019A71B9361384BFEDDADE629E87216AFF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 05A4
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: nFJsfA2/tSaGxfOPuSjR0OdoRFal2CzCXlhWjXqOO7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:36:13:84:bf:ed:da:de:62:9e:87:21:6a:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=f5cc2f8edeb226e52b8f9995687411b1a17987fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:70:05:40:c5:76:04:c4:e9:a2:01:b0:43:
49:6c:29:f9:9e:fa:8e:c2:ea:4f:65:79:74:a6:b9:
5b:a5:5d:48:46:3b:2f:e6:62:40:1d:bf:7f:e9:ce:
91:10:b2:c7:90:d6:a0:72:e7:de:ea:e0:3e:42:5b:
25:43:26:fd:9d:60:8f:5f:e0:a4:19:c0:65:8a:b1:
ab:b0:e1:90:99:6d:78:97:16:f9:7d:51:4f:1e:18:
5c:83:17:49:3f:ad:a4:7b:88:57:ce:9b:fc:4b:36:
44:2f:10:74:66:8e:b4:36:be:8f:c8:4e:78:98:3c:
34:16:fc:56:56:17:1b:76:c6:e4:0f:1f:b9:3b:16:
74:83:c4:f2:7a:19:bd:eb:5b:40:10:16:1d:35:05:
f2:53:81:9d:5d:d4:e6:d0:47:be:1a:52:2e:76:3a:
29:ec:8c:a4:7b:16:ec:4e:47:cf:85:96:8b:64:e0:
e9:43:19:55:61:e4:4b:62:cb:0a:7a:61:a6:b7:32:
3d:06:86:d9:51:ff:f2:49:b2:3a:c2:4d:d6:f2:67:
ca:4c:21:d7:dc:e5:be:a3:b6:c5:b2:35:2a:9f:dc:
0a:30:87:4e:de:08:54:1d:a3:77:0e:6c:7f:67:03:
b7:19:cb:24:b3:7b:6f:f3:02:14:dc:3f:b6:5e:06:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:2F:8E:DE:B2:26:E5:2B:8F:99:95:68:74:11:B1:A1:79:87:FC
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:37:24:11:6f:15:cd:25:40:6b:6e:dd:f0:99:d9:e0:6c:79:
46:e4:f2:8d:31:8c:97:ef:8e:96:9f:03:f8:e3:31:52:a8:45:
73:1b:5b:1c:8a:34:a7:ea:0b:27:8a:9c:e7:19:4d:7c:c8:a3:
fc:35:1e:93:6c:59:7c:fc:35:05:23:d3:5b:1a:2c:c5:2a:ac:
93:4e:f9:b7:49:c7:74:89:03:67:3d:5f:45:e4:74:e3:64:30:
fc:c9:76:67:02:7d:0e:ae:35:b9:ae:09:f0:68:47:ba:22:15:
ed:82:f5:42:54:6f:2c:9b:c8:74:1c:83:a6:b0:df:93:14:98:
06:4c:99:c5:f0:eb:71:c8:47:cc:2e:e9:82:3e:18:3a:ff:fc:
1f:aa:b0:d9:98:d1:5c:fa:7d:84:84:82:1a:f3:3c:6a:a1:c8:
7b:ba:46:75:a2:51:c8:55:33:79:ee:c6:b5:ce:db:77:bf:85:
c4:38:5c:cc:38:e0:af:da:be:70:3a:fc:2d:71:5b:17:30:19:
f4:6d:74:8a:4a:73:50:72:02:a4:8d:a9:6d:89:ca:d1:3e:a8:
84:21:1a:13:57:91:f2:a3:bc:31:18:ef:2c:83:e4:d0:16:b2:
c5:73:6a:cd:cf:76:60:23:bd:ec:01:86:34:9a:b7:9b:d7:b4:
62:aa:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:27:13 2025 by rpki-client