Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier: NIecQlHK/5VYjAqSO9h3rng+EKE5MmGVWTPdqpUM484=
Subject key identifier: 19:C3:AA:1E:BD:34:48:BC:5A:82:55:71:FA:81:3D:EC:94:D1:ED:80
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial: 019A71B7DB6D1B6BFA6D3103DA0EAC34D971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number: 0F87
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: jJ/yidZneYNkrQT73LRPRKJNAMCHCHB7A17IyHPlxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:db:6d:1b:6b:fa:6d:31:03:da:0e:ac:34:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=19c3aa1ebd3448bc5a825571fa813dec94d1ed80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:28:ae:3d:f8:e8:eb:c4:0a:02:0c:62:ae:
4a:75:e7:9a:74:70:bd:1c:d8:cd:26:7a:a9:4d:c0:
b5:a3:5b:1c:ca:c9:2e:6a:78:a7:3f:94:62:2e:f8:
d2:1e:bb:8d:49:63:5e:60:a6:b5:6b:0a:d8:98:17:
fa:5c:8c:f3:3f:2c:b2:01:94:30:0a:da:88:98:30:
13:62:17:f3:7f:8b:25:5e:4c:a5:cc:0c:00:ca:a4:
2d:82:90:56:81:ee:67:95:63:3a:be:97:72:a6:61:
b9:60:f5:ae:4c:df:64:74:44:56:a4:cf:b3:7e:2b:
27:ec:be:1d:8f:82:b4:23:f6:eb:98:11:b6:2e:ce:
e2:4e:79:53:e7:3a:19:6b:e6:22:31:fa:3b:90:76:
f6:ad:48:ac:a6:fe:fa:c6:cf:2d:e0:8c:b2:d3:45:
63:35:2f:74:ba:88:e7:7a:1d:7d:17:21:2d:e3:02:
c9:1d:7b:d9:8c:e7:04:bc:e7:fb:de:43:fb:75:dd:
61:73:97:55:92:17:2a:78:d2:e0:90:86:9a:aa:38:
29:b4:67:1f:94:36:a2:c2:d2:5f:47:90:2b:a7:2a:
f4:db:02:52:9c:47:71:14:4d:27:5f:f1:f1:af:3d:
84:a5:3b:d5:c6:85:2d:4c:da:7f:ce:91:ed:c5:20:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:AA:1E:BD:34:48:BC:5A:82:55:71:FA:81:3D:EC:94:D1:ED:80
X509v3 Authority Key Identifier:
keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:92:9e:12:98:24:e0:43:16:9e:52:8b:43:9d:8e:98:79:de:
c2:b4:36:10:2f:83:60:e9:48:cd:cf:70:03:f1:b0:84:d0:d5:
91:fa:e7:13:6f:86:cd:bc:8d:75:72:42:18:6d:33:63:32:09:
3f:64:05:22:9f:d5:eb:9e:23:72:43:eb:29:70:7f:d3:0b:b6:
d8:ad:08:47:f4:ae:49:67:4c:ae:55:89:95:fc:09:63:49:55:
79:5b:f7:8a:86:12:ec:d3:3d:71:37:4a:d0:15:d8:4d:9e:a7:
53:80:8a:9c:7c:ff:c3:66:4d:f8:2b:4a:1b:6c:72:5f:22:7f:
51:64:73:f0:11:2d:0e:1c:f9:d7:26:13:e4:3b:5b:0f:86:7e:
f3:1e:1a:51:51:82:e7:6c:91:4f:d8:59:94:da:23:46:bd:04:
43:32:08:ac:37:e6:26:cd:2d:69:6a:95:ba:39:f1:91:8e:83:
8e:fc:9c:82:6c:df:81:47:ea:e3:49:4f:47:ea:84:f9:98:22:
0c:03:55:0b:ac:d5:5b:f4:66:06:df:4a:c4:7a:5e:b5:7e:0c:
c5:d0:3e:02:d9:81:fe:be:79:10:c1:2f:f4:e1:96:49:ad:ac:
e5:f4:97:1c:cc:f8:dd:5e:02:f5:31:67:26:66:78:6c:c8:f1:
75:ba:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client