Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: qaIHyHx2Xj1iBGol7L8YGkWxWckGC3To6JAGE1axl6s=
Subject key identifier: 69:31:CE:F2:0C:3A:E2:7B:3E:D6:BB:B3:D3:59:AB:1F:C6:CA:27:B9
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019A72CAACA0B2485AE28F1170392A5AE5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 03D9
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: GkkrdZoBWOkcIH/0jmhHDMEV6tsDav20DHeCE1zzed0=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ac:a0:b2:48:5a:e2:8f:11:70:39:2a:5a:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=6931cef20c3ae27b3ed6bbb3d359ab1fc6ca27b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:dd:a1:e9:d5:8f:f0:8b:9b:29:28:63:f7:
a3:cb:50:f0:da:e9:70:aa:94:16:9f:2b:97:8f:b9:
2e:d0:23:a9:14:f0:37:cd:b0:37:6f:93:0d:c8:76:
28:e3:4a:55:57:fa:e4:ee:06:c7:d9:e1:a9:ee:8f:
e5:10:65:03:fc:9c:38:a6:38:8e:5b:16:79:a4:dd:
30:9d:56:5c:13:4f:24:81:0c:f1:44:fe:60:58:20:
50:8a:1c:2c:2d:aa:40:98:89:ee:ba:d7:0e:3c:7b:
e0:69:81:a3:bb:ef:78:20:22:5c:c9:fe:45:5b:42:
82:8e:0b:9a:33:d1:e6:60:03:12:ab:de:d9:5c:3c:
8a:b1:db:b7:5f:da:cd:0a:a0:73:54:a1:96:00:63:
0e:00:9b:dc:8d:61:d3:08:1d:26:c0:47:16:34:6d:
62:99:8a:3a:e8:6e:30:67:85:e2:7f:33:1f:42:a7:
38:6b:85:eb:13:ea:7f:5d:1b:ed:2b:f4:6b:67:13:
c9:a4:a8:a9:11:10:b7:9d:c6:6b:62:38:e2:98:13:
d3:8a:1f:63:7e:1b:22:67:ea:5e:a7:c1:e8:66:04:
c8:84:e6:2e:16:47:c0:c0:04:09:66:ae:24:97:55:
6e:6b:dd:81:7b:d8:19:d1:fd:7b:0c:3d:c0:ba:8c:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:CE:F2:0C:3A:E2:7B:3E:D6:BB:B3:D3:59:AB:1F:C6:CA:27:B9
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:36:d0:62:8f:4d:d6:1d:a0:61:23:fb:fe:68:54:61:f5:
53:18:b7:25:9f:8d:44:94:ed:c8:1c:1d:a2:e7:aa:0e:5b:59:
e8:e5:18:eb:60:06:d1:1f:28:c3:fb:4c:1a:a8:b4:e7:d0:50:
ac:6b:b6:63:71:85:4b:43:ae:4d:8c:55:12:d4:b4:65:1c:b2:
b9:79:e0:8d:c5:94:76:2b:90:e6:3f:75:a2:91:1a:cd:5a:25:
7f:50:97:4f:a5:a2:94:4f:53:db:8c:7f:22:f1:90:96:86:f7:
db:c0:c8:e9:ec:20:be:ba:58:5e:71:27:58:46:30:50:6d:88:
92:bd:71:df:40:aa:80:f5:06:d8:7f:c6:49:cc:d8:dc:58:10:
29:22:08:00:65:05:4c:09:1c:89:c2:72:22:38:36:ed:40:2b:
65:82:ca:31:fb:70:78:f1:03:44:ad:29:4b:8a:39:f4:8d:29:
5d:18:c1:e1:10:f6:15:ad:68:fb:3d:c2:3f:1a:31:65:a8:0b:
f0:03:c0:91:71:ff:b3:0a:9f:57:91:f7:cf:1c:f3:0f:f1:73:
d3:fa:b7:3d:ac:d8:09:31:c9:41:1b:b5:b5:82:01:39:5c:d1:
02:23:9a:e2:63:73:ae:41:4e:ec:b4:4a:87:ad:77:37:99:0c:
a6:f8:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:17 2025 by rpki-client