Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: iy11HfOIp2E67fo4n4vA0xffDJ9rYp1rRvy3vQQ05wE=
Subject key identifier: 05:44:8F:48:59:51:B9:90:32:50:A1:77:9D:96:4F:8F:6D:FB:CB:77
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 019A71B8DD5AC6AA31AFC1E5F9ABCC307D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 013F
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: PxeYPfYXM6O/L6lG9zMZHSROlVNjM8tys2QwjuhKbUs=)
2: O55FnDiUhMsPTi6hjIewBuX7Ta8.roa (hash: 3JNSAI/aVMRICcZVLh9uXFKqAHc+rCKXfwm9TEvUz2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dd:5a:c6:aa:31:af:c1:e5:f9:ab:cc:30:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=05448f485951b9903250a1779d964f8f6dfbcb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:97:34:bf:8e:20:42:62:49:9f:33:cc:e2:
29:00:9d:ea:41:56:4a:c6:5e:fa:75:13:81:c3:dd:
05:17:b2:7a:9b:31:e7:fb:aa:37:14:ce:e0:9c:f6:
df:e8:36:2d:83:78:80:13:74:00:65:4a:fd:7e:1f:
64:47:9a:4c:2e:22:5b:6d:2b:14:2b:2d:0b:9d:60:
2d:c7:45:a3:86:22:87:86:c4:7c:7e:3b:70:5b:9a:
e2:e7:a8:c9:5b:57:bd:48:20:05:ff:66:dc:6a:7f:
f3:8c:45:41:20:75:a7:a0:ae:11:ff:29:c6:e3:d7:
52:35:fa:15:5c:14:68:f9:b8:b9:09:92:2e:16:4f:
a5:25:b3:70:26:e0:2b:3b:88:5b:64:3c:45:5f:40:
a7:cc:8a:4f:69:2d:e8:94:ab:90:1e:0b:d6:79:60:
e8:68:0a:a5:45:72:f6:78:4b:4d:4d:17:5c:1b:2b:
c5:d8:c2:ff:59:6d:25:90:f4:60:c1:90:5b:6d:54:
12:a8:09:35:bc:d3:73:94:8b:30:15:15:58:8c:22:
ba:c5:28:b4:ab:9a:e3:bd:d2:18:0e:d5:a1:03:a0:
07:ac:34:51:a8:0c:e3:2f:70:c1:f3:c9:ee:94:d5:
1a:08:39:5e:2e:e8:d8:8a:47:dd:c1:30:bd:5f:3a:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:8F:48:59:51:B9:90:32:50:A1:77:9D:96:4F:8F:6D:FB:CB:77
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:66:f8:d1:19:71:80:5b:59:5c:74:70:cf:97:7a:bb:2f:
fe:4b:9a:1c:36:9b:46:57:b5:41:4d:7a:45:3b:21:66:04:7f:
a2:44:7f:5a:20:29:bc:81:87:e5:20:d0:b4:44:15:8f:69:3f:
02:82:56:82:e1:e7:c0:d9:02:8a:85:13:18:d2:ad:7c:41:0f:
fa:c3:80:72:9e:db:ee:5a:02:ea:7e:a8:33:23:76:36:1d:78:
68:e3:5c:c6:07:9f:d2:00:e3:e9:57:56:eb:b2:b7:61:46:c4:
a2:f6:ef:ee:c4:84:b1:7d:81:a8:9d:95:d0:38:44:07:48:e1:
35:1e:03:63:f1:dc:67:0e:50:2d:99:f6:0a:f2:e2:55:ec:27:
8d:56:d9:4f:15:7d:2d:d5:f5:4e:0f:f7:fd:dd:22:65:d2:e1:
d3:f5:bf:bf:04:57:ad:ea:9c:a5:29:af:19:02:88:dd:02:c4:
00:e2:b8:00:1d:ec:50:7b:bb:60:51:23:1f:a7:c6:b4:70:c0:
64:03:69:c9:60:53:3d:41:76:15:ac:d6:0a:eb:5a:58:59:3b:
d8:48:8d:18:4d:80:7e:5e:10:2e:28:9b:b8:40:67:0c:df:80:
81:ac:1b:3c:ae:d4:96:52:60:4e:9c:af:68:46:e2:f0:81:34:
c2:8f:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:54 2025 by rpki-client