Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: oP96syU5UA4d7SDw/8M1C1BOIAq3skWruLxB9YWmEuA=
Subject key identifier: F9:6B:61:C6:AD:30:FC:23:53:BB:0E:5C:CA:65:86:6C:E3:93:A0:F5
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019A7293BD27F47E79D3B3EEB68898538D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 06A3
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 2ihfqAObsrFwTg7vfkeFMhL3pSMD2i+D3uwF6HKbpSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:bd:27:f4:7e:79:d3:b3:ee:b6:88:98:53:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=f96b61c6ad30fc2353bb0e5cca65866ce393a0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:7b:2e:ce:1d:13:f0:57:1d:fc:de:58:21:
5e:ad:dd:76:d4:ce:5b:cf:3d:9a:b6:88:9f:a0:86:
c1:91:d4:2f:a1:e1:9e:5e:1e:e9:d9:d6:f6:c7:b8:
bc:1a:24:0e:5d:46:a8:86:ca:9f:3a:21:58:33:a3:
7b:b2:2d:04:2a:04:13:15:9b:85:6d:d4:70:73:50:
f1:30:09:a9:f1:dc:a1:8d:e0:e9:87:24:f0:71:88:
60:18:34:16:52:38:d5:a9:16:83:27:ed:8d:8e:ef:
7a:7a:f0:a5:24:33:6f:92:bd:2c:d2:5d:6f:d6:5a:
c5:00:b4:52:9e:08:c3:83:82:d3:2b:3c:93:ef:64:
3a:63:d7:83:ea:ca:a7:b6:ed:16:15:c3:22:a2:c4:
a4:40:34:30:a0:9d:ec:14:08:b8:a0:b9:a4:c5:60:
4f:84:d1:86:38:49:59:2c:e8:0e:24:25:3d:1c:2a:
e6:8b:d6:dc:0d:f4:15:d6:38:58:e7:75:04:a8:5b:
b6:81:53:5f:18:87:27:43:fc:64:27:86:30:01:8d:
51:d6:f3:cc:24:a7:e2:e9:67:38:fc:82:d2:02:78:
74:e4:df:76:5e:10:36:6c:cc:ec:55:78:6f:5d:b9:
62:f1:79:99:f2:fe:56:21:d0:80:3b:05:a4:10:7b:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:61:C6:AD:30:FC:23:53:BB:0E:5C:CA:65:86:6C:E3:93:A0:F5
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:88:ca:2e:ac:e5:81:b0:8b:9e:c0:57:18:ee:98:8a:6e:c2:
8a:be:53:3d:cf:b2:eb:c8:05:b6:e2:fb:3a:45:10:c8:a0:ab:
67:f7:34:79:72:d7:f8:7e:71:fe:a6:e5:05:e2:fd:81:e1:f4:
16:8a:bc:ad:ad:53:54:16:92:21:bc:84:f7:41:34:d7:4c:2b:
ec:fe:96:a1:1c:79:22:08:fc:8d:92:b3:56:83:ea:61:f3:3c:
42:5a:af:1b:33:d8:02:f0:6b:4b:05:95:79:66:2c:da:fc:77:
4a:04:29:54:7a:42:00:dd:4d:33:58:aa:14:82:93:a7:2a:fc:
a7:79:0d:07:63:02:b3:1d:a7:1d:ea:70:a8:1a:ff:fa:d0:59:
e5:36:08:8f:83:91:70:32:07:2b:cc:58:48:b0:c3:67:fa:b8:
57:0f:1a:a0:97:2c:89:c7:3f:23:29:4b:5c:19:b6:74:7c:d4:
a8:3f:94:7d:83:52:08:62:9e:8a:a5:56:f6:78:2c:f6:7f:58:
6f:55:18:95:72:ec:1b:e7:ab:f5:b7:7c:80:5e:a8:2d:9d:2f:
f1:e8:a6:e4:1d:39:33:c4:ac:9c:17:e1:9c:72:85:76:29:ea:
7c:5e:f5:e4:22:17:6f:88:7b:21:e5:49:ad:b1:62:5e:a9:40:
4e:5e:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client