Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: Xecdb346ysd9Euozrd8+LawpZVuS/ANnzpVTNVY0d0M=
Subject key identifier: 05:EF:B5:C6:DF:C5:EF:A9:F1:7E:B3:57:29:25:DA:A7:4E:CD:62:55
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 019A70DC166605820FCCDCD6DB696ACD92C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0B0D
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: 07k3iLSVWFGWctVt54HxgWBx7MhzFOJ3E8Ge+6coiNI=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:16:66:05:82:0f:cc:dc:d6:db:69:6a:cd:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=05efb5c6dfc5efa9f17eb3572925daa74ecd6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:73:69:ad:34:c3:5a:8d:3f:a5:6d:ee:bb:
e3:2e:19:ef:bc:5b:9e:bc:64:0b:25:09:ad:08:f5:
4b:0b:6a:68:d0:ed:cc:1f:29:cc:9f:08:73:63:a4:
2d:35:b5:bf:df:59:a0:8e:d6:bf:56:b3:e5:7e:6d:
64:d0:d2:cf:e3:df:44:32:83:15:b2:68:7f:93:89:
e0:58:e8:a8:55:bc:be:64:76:7e:4d:4f:67:58:50:
49:04:a8:88:a2:02:ce:bd:08:49:b9:00:bf:6b:dd:
24:f4:ea:69:90:30:e6:3f:96:57:49:f7:f3:ef:2c:
d9:0f:aa:f5:97:e8:83:ae:40:d5:64:9b:f1:aa:3f:
4b:61:62:0a:09:b8:82:8a:47:7e:23:1e:75:06:c5:
88:88:4b:c2:8c:2a:57:bf:9a:89:35:82:1f:e9:be:
df:8d:58:05:a0:27:a9:da:e6:0b:c9:ce:bf:28:df:
7e:9b:ef:f5:45:bf:36:82:50:dd:03:2a:56:eb:4b:
15:f4:35:f0:c0:6b:9f:15:60:a4:7b:f6:ce:aa:e6:
ae:33:25:f7:50:2a:b1:a0:fd:fd:ba:5f:04:94:23:
82:a1:11:b6:be:c8:2e:1b:13:26:61:4e:94:02:64:
f6:b5:3c:40:58:4c:17:09:ea:78:b1:be:6d:90:3d:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:B5:C6:DF:C5:EF:A9:F1:7E:B3:57:29:25:DA:A7:4E:CD:62:55
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:3b:07:ef:2d:3d:35:a3:09:0a:89:1e:ab:25:8e:9c:b9:
30:6a:00:cb:06:47:26:d0:b6:27:91:95:57:76:ee:05:ca:22:
7c:cd:4b:bf:87:65:60:dc:90:b1:60:2b:c3:c9:a0:b5:ff:b5:
ad:67:c1:ff:89:f2:dd:67:2c:c5:fa:94:ae:7d:91:ab:c7:95:
e5:2a:4a:80:87:50:4a:8e:d4:58:a9:f5:89:e8:2a:87:6d:75:
97:45:4a:08:ef:11:84:3f:5a:58:78:4a:31:cd:41:a2:d1:2e:
5a:ec:30:04:d0:47:1a:37:d0:92:fe:d9:5a:de:7b:fe:de:98:
b4:d1:8e:49:9a:27:df:c7:09:8d:a4:0e:0b:6e:8a:af:67:4f:
1a:85:c0:5b:2a:e3:d3:5e:40:22:2b:74:d1:c1:65:c9:28:ae:
3a:a5:5d:5f:00:d0:6d:a5:16:da:58:bf:07:86:fb:ca:66:da:
2c:c5:d6:38:56:53:fb:cd:06:e2:5b:4f:db:1c:69:8b:d3:a9:
2a:52:b9:d7:74:92:5c:cc:93:3d:c6:22:0a:5e:a5:a1:cf:28:
61:a1:11:44:ec:c8:a5:9d:43:88:44:0b:0c:14:7d:8d:9c:ea:
45:76:5c:2d:73:bf:5d:ff:3f:19:c0:07:8d:51:b8:a0:48:7f:
b1:b2:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:54 2025 by rpki-client