Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier: 4JC6MYq6SMMmUtoJezl0+0uUgarPIyEhbM9H+ma6sew=
Subject key identifier: 64:31:60:3C:56:CF:48:47:7F:6F:9D:13:5E:48:01:74:CB:77:7C:19
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial: 019A7301736E76A1AF1548254A6FF2887FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:01:06 +0000
Manifest this update: Tue 11 Nov 2025 13:01:06 +0000
Manifest next update: Wed 12 Nov 2025 13:01:06 +0000
Files and hashes: 1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: Sgc4wt5LXPkztgDN+5zrrt+bc35UZOApfBSe/IYkYYc=)
2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:73:6e:76:a1:af:15:48:25:4a:6f:f2:88:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Validity
Not Before: Nov 11 13:01:06 2025 GMT
Not After : Nov 12 13:01:06 2025 GMT
Subject: CN=6431603c56cf48477f6f9d135e480174cb777c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:5b:61:0f:0a:2c:09:54:fe:03:96:7a:3a:
a4:2c:cf:78:fa:e7:eb:d3:9c:93:17:96:ae:92:db:
36:5f:20:14:d2:a1:b3:0c:de:5a:be:f9:34:6f:13:
81:89:88:02:00:7b:37:7e:24:86:e0:c6:81:8e:6c:
53:0f:e7:70:31:84:1c:5a:1e:5b:e5:51:4e:26:68:
87:4f:a8:b5:05:ff:47:16:20:f4:6a:ce:0e:a4:7f:
83:1d:a9:8e:62:97:bb:c8:26:89:40:46:bb:8f:48:
0a:e1:50:af:c7:16:00:43:12:2d:4e:d9:57:8a:49:
43:af:a9:63:15:40:fa:3b:ff:92:02:d7:86:46:b2:
57:72:16:f9:5d:2b:b1:0b:05:25:85:84:f9:b1:0c:
69:8e:e7:b1:e9:ea:0c:6d:00:6d:2e:49:d2:98:e2:
bc:ad:64:fc:61:7f:1c:91:ad:31:c7:89:5a:2b:84:
2d:20:b4:63:5c:bf:bf:80:5e:6a:07:44:6e:3d:fb:
e8:d7:c8:1f:60:b2:d5:9f:a7:c4:26:11:50:a4:5d:
d0:3f:a3:7d:24:cf:22:bb:e0:3e:2f:a3:26:f1:41:
46:b7:5d:2f:ee:9f:b6:b5:d4:bd:8f:ac:1c:fa:6d:
02:8a:17:3c:c7:f0:21:c1:8c:a1:13:83:9e:99:26:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:60:3C:56:CF:48:47:7F:6F:9D:13:5E:48:01:74:CB:77:7C:19
X509v3 Authority Key Identifier:
keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:71:29:c5:c4:af:1a:01:5a:b0:63:10:31:f7:59:2b:93:e1:
5f:6a:1a:f9:10:1e:1f:e3:75:5d:fb:8e:31:fe:6a:0f:9f:84:
6e:4d:73:14:4c:76:22:d6:49:0b:c7:a7:7f:35:b6:ac:01:7f:
7d:3f:b8:89:87:90:23:7a:9e:de:dc:6e:fd:f6:6d:8c:fd:38:
5e:69:3e:b5:8d:8e:cc:b8:29:5e:2d:1c:8d:42:d2:08:6d:89:
e8:d7:36:7f:1e:bf:09:14:cc:a1:7e:dc:6b:aa:07:d3:83:32:
b0:90:bb:4f:e8:77:64:51:8c:08:c9:2f:d8:cc:2e:5d:2d:d1:
3c:d8:93:f0:48:03:ae:45:75:b6:b9:5e:86:70:90:cd:3d:ca:
c4:64:93:25:bf:e2:9a:98:72:ef:9a:ca:e0:d2:26:a5:d3:15:
39:69:4d:41:83:ce:89:84:08:9c:0e:d8:ed:50:ea:89:a7:5c:
32:7e:94:f9:33:fa:49:6a:55:69:d0:c1:57:5d:44:b4:d7:8c:
fb:6d:8d:09:6f:1a:6d:37:76:b4:88:d8:fc:59:f6:53:30:1b:
1e:aa:f4:a0:49:a0:22:22:14:21:82:17:8b:43:52:27:ee:83:
8b:07:3b:25:9a:13:4c:77:29:6b:57:bb:94:21:5a:04:29:c3:
ca:19:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:04 2025 by rpki-client