Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: Iwd4Joq0s4JuEx3334pq1d7CdOP4+R1R24MFvPuPQ+k=
Subject key identifier: 8A:17:37:BD:49:04:BA:31:EB:8D:C4:54:69:52:7C:B3:ED:AE:86:4A
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 019A725C5B3623802E429CF711CCE0A64BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: n+2Z65lc0xdQ06wYLAkjt8MUwXU8ezN1QxxpE+89EBw=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5b:36:23:80:2e:42:9c:f7:11:cc:e0:a6:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=8a1737bd4904ba31eb8dc45469527cb3edae864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:22:a7:22:15:36:84:cd:1e:41:ea:ef:01:
00:45:73:f7:42:cb:56:d9:6b:52:44:5f:7c:95:d6:
22:f2:13:78:39:b4:d5:13:75:1f:32:6a:1a:ee:77:
b0:60:60:10:cd:3d:b4:f5:a8:5f:4e:df:7e:c9:4e:
4b:65:13:cb:6a:bd:ce:84:73:d5:14:44:71:b2:9e:
ac:1b:13:5e:c8:13:ee:d3:cb:b4:98:d0:37:28:65:
07:c8:45:8e:32:47:f3:97:99:36:98:57:85:8d:94:
37:24:65:4c:5a:d4:a0:d5:30:17:0c:47:c9:b8:45:
3b:92:1e:05:e1:c0:da:b0:a7:30:c6:a1:4b:71:5e:
5d:51:c0:d9:f9:a8:48:0c:18:ce:8c:1e:df:5e:4d:
17:a7:fb:32:f3:38:2d:40:8b:63:64:05:71:8b:77:
1b:9d:35:b1:84:e9:b7:99:f6:b5:ec:11:74:e1:46:
43:82:65:0a:bb:b4:c2:8e:fc:fe:95:62:56:ab:88:
91:4b:96:53:ed:dd:fe:89:eb:e7:54:09:cb:2e:f1:
65:b6:c2:cc:0c:5e:90:98:5a:f9:a6:9d:b9:38:ff:
16:a9:13:f2:1b:35:8a:48:05:ed:68:63:66:31:ba:
e2:4d:4d:f4:30:6a:85:67:f8:d4:e6:81:8a:09:a1:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:37:BD:49:04:BA:31:EB:8D:C4:54:69:52:7C:B3:ED:AE:86:4A
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e0:ac:af:52:99:4d:6b:0d:44:24:64:be:f9:5c:d4:29:78:
6c:c7:27:14:96:b2:41:fe:65:5d:54:2a:3e:4a:c2:ef:1a:be:
9a:20:55:0d:f4:06:32:7f:b2:ce:9f:59:f7:91:3a:ac:87:d9:
58:5d:e7:b2:74:53:4d:3f:cf:b7:d3:5f:27:ef:15:90:1b:90:
ad:8b:1d:de:b4:a0:a7:ba:8d:41:ba:08:d3:8b:21:f4:97:aa:
d5:a9:3f:45:93:d2:21:ff:d9:91:e9:31:4e:15:2e:68:f4:f8:
87:4f:b1:45:7c:22:08:d3:a7:c5:d0:4c:8b:08:3a:63:26:b3:
89:14:09:1b:5d:0d:40:57:f5:ca:6d:11:b3:25:94:b8:5c:2f:
87:2f:6a:7f:e4:85:c1:17:93:6e:d4:47:f1:9e:04:17:9f:ea:
84:4e:b7:0c:90:d9:90:89:c1:63:f1:0d:48:ca:28:fd:20:14:
fb:f2:00:c2:94:61:8c:53:e8:60:b5:dd:9a:39:51:dc:34:c0:
46:d4:22:5f:3a:ee:55:7c:a2:34:25:8b:88:c2:7b:ae:ad:4c:
de:f3:4f:db:24:28:d6:a8:ae:b1:41:e5:47:69:20:2e:92:ac:
65:79:29:2b:c2:22:d9:b9:b1:af:d6:ad:b4:8f:70:bd:a2:b6:
5c:2f:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:43 2025 by rpki-client