Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: 9blDXn4701ZXuxM+9yj3xOqk6TjZkgtQwDrKako5ZBA=
Subject key identifier: 78:C8:79:B8:B1:67:C8:6A:DD:3C:04:4D:E2:C2:46:D2:E9:AF:93:46
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 019A7225B4DD8D24CAF8DA55D181C0F30DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: arFw7UcD1UjGajO9YkPUnqtSPMJPbrNM1km1ZdY83Fs=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:dd:8d:24:ca:f8:da:55:d1:81:c0:f3:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=78c879b8b167c86add3c044de2c246d2e9af9346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:68:e8:97:a5:73:42:1e:80:ff:8d:19:b9:
02:58:0f:34:10:9c:fb:6e:fe:94:87:15:f9:90:2c:
84:01:5a:d8:2c:dd:01:f4:ce:ab:30:6b:a3:44:46:
20:cc:fe:ee:32:fc:45:58:51:56:41:ca:d0:4d:03:
6b:b1:db:7c:94:8f:59:57:39:3f:b6:7c:5e:81:d1:
70:ef:17:fb:65:cd:48:1a:bb:3a:f6:32:98:eb:1d:
4f:2b:45:bd:87:e0:fc:cb:2f:ab:cd:09:7b:2f:e0:
43:6f:49:40:16:55:d3:9e:65:e7:c7:36:3f:8e:e5:
b6:4f:f4:c0:68:3c:07:b9:25:e4:46:ad:50:63:08:
b5:96:cc:67:94:21:5c:29:ff:97:2b:b6:97:fa:b5:
79:6c:e6:c4:f4:ea:0d:bb:f1:79:04:c4:12:a3:d1:
99:f9:df:ab:79:9a:1f:b9:aa:50:63:23:18:52:4e:
3d:e7:76:f9:d4:29:c6:35:fc:5f:72:a1:ff:0c:05:
c5:f7:aa:c0:3a:3d:87:b2:00:10:9b:47:22:49:cf:
25:00:bc:16:cd:17:22:54:19:43:5b:67:92:47:21:
b0:0e:7e:92:7e:3c:e0:3e:dc:9b:06:d4:36:50:3d:
95:f7:b1:ff:16:31:3c:1b:da:6c:03:29:41:f9:dd:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:79:B8:B1:67:C8:6A:DD:3C:04:4D:E2:C2:46:D2:E9:AF:93:46
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:56:4a:ed:e0:40:69:1b:3f:78:90:d3:b9:f6:9a:f6:b6:f8:
c8:21:16:99:03:37:73:0d:ae:bf:58:69:c9:40:be:07:74:14:
47:2a:05:5e:67:c4:d8:25:ae:ce:15:cd:9d:39:bf:1c:d2:c9:
50:0d:8f:28:c0:ac:b6:9a:b1:68:9c:71:5a:ce:28:87:fc:b3:
92:27:10:f6:bc:f7:4b:65:a4:1f:ab:e5:44:4d:48:10:0e:f5:
51:00:45:33:b5:de:04:cb:6f:2b:3b:b8:d2:ab:c7:ec:23:03:
3f:86:ee:4a:54:dc:ae:89:1a:bc:45:36:0c:66:36:e5:f6:c9:
97:80:b4:7c:23:b8:6f:0f:03:71:0b:e6:6a:67:67:8c:c4:41:
bd:95:fd:1d:6a:b9:4a:1a:17:7c:ec:62:2f:62:8e:39:fd:a7:
29:ec:0c:73:d4:66:7c:8a:3f:be:24:1f:52:1d:24:a6:a0:24:
2c:62:46:54:f9:98:1e:e6:25:4d:bf:c6:87:24:32:6a:e1:09:
7d:8b:1f:82:43:c7:24:73:33:2a:d4:b9:ed:e3:72:37:46:e5:
9b:7a:bf:b3:88:86:4d:4f:fe:00:ee:61:61:ae:dc:83:c2:a2:
5d:47:a2:2c:6c:a7:8e:19:c5:1a:93:29:ed:c8:94:a5:6d:bf:
84:d4:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:44 2025 by rpki-client