Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: jBffD/sFsItRqbNuY8gmH6BsBvJ/ysAm0UHDkHG3+2Y=
Subject key identifier: 29:08:29:31:0E:B5:59:1A:86:7F:13:CB:02:35:89:52:F9:9B:9F:5D
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019A729411E85EEE95BE0615B452AA3D0C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 050A
Signing time: Tue 11 Nov 2025 11:01:37 +0000
Manifest this update: Tue 11 Nov 2025 11:01:37 +0000
Manifest next update: Wed 12 Nov 2025 11:01:37 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: NCbjQxiqXCtpaozJKw5VoWRZ8XhVaCHZQ+tTlHle3rE=)
2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:11:e8:5e:ee:95:be:06:15:b4:52:aa:3d:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Nov 11 11:01:37 2025 GMT
Not After : Nov 12 11:01:37 2025 GMT
Subject: CN=290829310eb5591a867f13cb02358952f99b9f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:39:3e:62:29:77:71:73:cd:e9:00:9d:8d:
53:15:2e:67:4e:f8:d0:d3:0e:8c:82:4d:53:04:d0:
ab:34:17:e2:0b:43:a7:4a:3c:d4:ec:14:77:29:7c:
f7:cd:09:fb:12:c6:69:76:dd:f0:e0:e0:32:a1:c8:
3a:80:48:42:4f:bd:17:57:fc:12:2d:09:d4:42:7c:
d8:e5:fe:20:93:b2:73:ac:3d:94:48:00:4c:3b:6f:
18:b2:5f:75:5c:35:b6:88:31:49:e0:0d:33:3d:64:
11:15:d5:51:88:a1:6e:d0:4c:d3:0b:09:b9:60:5b:
ce:89:3d:6f:69:96:f9:8b:7a:2a:f4:64:a8:3b:51:
47:ff:8e:77:8b:52:2d:6d:d7:9c:e7:ae:5f:4a:9d:
4f:b1:51:05:f3:25:9a:6e:de:b0:ec:bc:28:be:7f:
cf:7a:de:28:a8:8a:8a:db:2b:aa:1f:55:6f:88:45:
66:a7:a5:2b:90:b3:ec:a5:82:bd:d4:37:78:a1:61:
0e:7b:0b:7a:16:9a:a8:ff:bf:40:e8:f7:1e:50:03:
e4:d0:e0:7f:e1:ea:78:fe:58:63:b9:88:bc:7f:40:
c0:85:05:bb:e3:28:39:57:83:ca:35:e2:ec:3f:81:
f1:ec:00:01:2b:27:af:c4:c1:32:de:c3:c1:cf:29:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:29:31:0E:B5:59:1A:86:7F:13:CB:02:35:89:52:F9:9B:9F:5D
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e9:04:5e:d9:8e:d9:c4:55:0b:ec:9d:d9:72:62:cb:37:bc:
18:49:bd:9c:f3:0d:c6:00:c4:5f:5f:5a:49:1e:89:bd:29:5d:
b9:e3:7c:cb:8d:30:a6:f1:c7:55:6d:54:df:23:6c:7c:52:27:
d4:13:fb:c7:f9:3f:d2:2d:14:29:c2:24:da:7f:b9:fe:a7:2a:
f0:be:c6:27:13:0c:f0:20:10:f2:22:3e:f0:e3:3f:47:40:a2:
10:ab:54:fc:49:18:60:25:5e:8c:b1:ed:de:6d:df:22:ca:a4:
8d:10:08:15:2c:04:e6:e2:e8:a5:31:ee:94:05:d5:77:8c:ce:
b8:59:01:64:8a:4f:08:69:d6:5c:fe:2c:45:6b:42:9b:7b:5d:
56:12:8d:85:2d:cd:40:38:49:8c:70:f4:6c:13:f5:78:8b:8f:
fc:ee:a9:af:d7:9a:85:99:a4:b2:8f:c7:14:52:de:f1:c7:ab:
28:6b:28:25:d6:e9:f9:a6:9e:af:7e:6b:fc:ce:75:60:3d:c1:
63:0b:44:45:ce:1f:ed:db:fa:8d:89:db:2c:6f:54:57:24:22:
84:e7:84:27:41:fe:4e:6b:72:1b:ae:35:d0:2c:4a:dc:7d:2f:
a3:b5:b1:75:62:d2:c8:8f:32:aa:98:0c:af:f3:9e:95:41:bc:
6a:ec:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:14 2025 by rpki-client