Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: axXNElJDAwcCt+UICHchuFFR/5qGpYCDUGHvUSdzCMY=
Subject key identifier: 8E:9E:AB:45:86:6D:9F:34:6E:F2:C8:56:44:78:BC:DD:A3:33:11:A5
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019A71B90CD44A01B7F556AFA7644CC1FF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0C62
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: 6/rwIBuIDmO29TTwQJtWXevtWbJd1DQAE5FbJhpZvew=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:d4:4a:01:b7:f5:56:af:a7:64:4c:c1:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=8e9eab45866d9f346ef2c8564478bcdda33311a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:bb:2b:93:a3:17:03:7d:fa:83:7d:a9:15:
be:6f:75:dc:be:f5:d1:fd:50:10:d9:b6:29:38:8f:
1e:4e:0c:4e:a0:68:eb:e7:83:09:9a:37:8e:1f:1f:
ed:c1:11:ce:f2:84:83:17:8f:38:a3:7a:b6:8e:45:
50:f5:e3:67:79:c6:c9:97:93:dc:19:27:f9:ed:9b:
98:b5:5c:16:46:8e:0d:07:96:eb:23:0a:53:26:e0:
10:d0:a6:e2:d9:d5:af:75:90:05:e9:3a:a0:5e:ab:
53:a9:6e:2a:4d:ea:ef:ac:38:b2:5c:83:89:13:33:
d8:38:82:dd:70:f8:8a:fd:3e:d1:52:2f:60:3f:ba:
e4:31:0b:e2:d3:b9:b3:0e:94:95:49:f6:f4:65:ba:
2b:13:4d:61:d2:6b:a6:0b:36:9b:0b:ba:ff:b8:bb:
3b:61:73:e4:da:43:10:f2:f4:9d:b2:b9:b9:b7:44:
11:d0:79:5a:23:c4:40:a4:5c:bc:8d:9b:e2:e6:4c:
f7:a3:91:64:55:47:15:a0:18:37:c5:f8:68:ed:e4:
7a:52:8b:0c:e4:91:7e:46:7a:a3:4b:5a:47:bb:60:
8a:1b:74:e4:42:1a:3f:17:66:e5:c6:e3:98:ae:a2:
18:0c:e4:b7:75:08:73:cb:81:f6:72:7b:5c:3c:18:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:AB:45:86:6D:9F:34:6E:F2:C8:56:44:78:BC:DD:A3:33:11:A5
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:c7:9c:97:14:4b:c1:76:a0:b7:58:d8:93:94:f8:7a:7b:
dd:15:88:d8:0a:b5:d7:2e:5e:ff:58:3c:58:ba:82:64:6d:5b:
f0:b9:f9:86:c0:76:41:8c:c0:59:0e:83:b7:2f:1f:10:61:d5:
fc:3c:53:6d:94:1b:a2:a6:8e:64:c1:64:0f:23:42:34:93:56:
5f:15:a7:ab:40:ab:ae:7e:87:97:a7:ac:76:d0:c5:c1:2c:cf:
f9:a0:2d:bd:f2:29:56:30:3d:6c:f4:b7:a9:23:83:0b:21:72:
78:7b:ef:0a:f4:2c:d8:30:52:51:73:a9:a0:1d:64:48:dc:3c:
3b:b9:2f:bf:3c:29:22:8a:c6:b9:98:32:c2:60:54:5d:9b:50:
ea:be:a2:67:3d:14:55:d6:9b:69:bd:3c:22:9a:97:4a:e8:cd:
11:0b:26:2f:f6:f6:95:ec:aa:74:6e:47:cb:6e:bf:08:7f:13:
5b:9f:1e:7e:f2:a7:c3:06:9a:c4:73:66:2e:11:b7:cc:22:69:
6a:e0:f6:61:ad:da:5c:e4:76:86:e0:98:cc:7f:fe:2e:46:59:
93:95:48:e4:71:18:54:ca:26:6c:5b:44:fa:0c:df:64:69:63:
1a:3d:96:f8:11:ac:67:d8:d3:11:d8:f2:f2:e5:1e:66:49:fe:
a0:de:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client