Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: 3nAc+ceUs1R7XWjk5U7QaRJ464ETutNfe9D/hoZBlsc=
Subject key identifier: 8C:3B:EF:B0:47:78:E8:45:FD:D5:7B:28:42:AC:5A:DA:27:3C:BB:16
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019A71499CB6C1C661CEE38602F2FD69EB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:40 +0000
Manifest this update: Tue 11 Nov 2025 05:00:40 +0000
Manifest next update: Wed 12 Nov 2025 05:00:40 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: QOXIi4FQcIxlCXCQUfA3EBGLnhyc4SSL4QyeuB/Ybqk=)
3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9c:b6:c1:c6:61:ce:e3:86:02:f2:fd:69:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Nov 11 05:00:40 2025 GMT
Not After : Nov 12 05:00:40 2025 GMT
Subject: CN=8c3befb04778e845fdd57b2842ac5ada273cbb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:88:fe:49:40:ca:8b:c1:b0:d4:8d:8f:d2:
b1:fa:a3:9d:76:ba:a4:fa:73:b1:bc:73:ce:fc:b8:
83:df:1a:f1:0f:1b:ba:3b:ec:99:94:23:b8:a7:98:
71:5a:b1:b4:e9:8b:91:3d:47:3d:ca:43:de:c3:2b:
48:48:4e:0a:fd:c0:90:41:4e:71:18:04:e9:9d:ce:
83:a7:7f:09:85:23:38:a2:bd:48:48:fb:8d:e8:2b:
ad:94:5b:a5:61:7e:87:f8:36:d0:37:e3:4b:e6:6c:
2f:65:43:ff:c4:c5:78:8c:9b:86:6a:9b:94:c1:83:
c8:cc:bd:ab:61:5d:91:3c:e9:c3:5f:00:56:50:7e:
e6:cf:c9:cb:76:2a:d4:a0:dc:ff:ee:8f:76:3b:89:
92:cf:4e:4a:fe:a0:00:99:05:a1:10:e6:73:bb:01:
37:8d:04:70:41:0d:b1:94:5c:5b:3b:44:aa:4c:d4:
f7:9c:94:70:67:0e:29:53:ef:6f:e8:36:5c:c3:fb:
9b:9f:d6:b4:7a:ae:49:96:70:e9:6f:f1:6d:73:e6:
a1:2a:aa:03:e4:3c:c6:1b:e7:cd:ce:8e:99:58:04:
42:c1:a7:83:e5:db:ef:e7:ea:56:b9:9c:08:db:7d:
b5:6d:1f:ff:07:51:4b:3b:44:ed:ed:8c:69:14:ff:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:EF:B0:47:78:E8:45:FD:D5:7B:28:42:AC:5A:DA:27:3C:BB:16
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6a:8a:e4:5e:28:68:d3:fe:99:c2:c9:a5:89:e9:f2:97:87:
13:df:af:2e:dd:b0:48:63:db:3e:e0:10:79:b1:99:fc:3b:1e:
2d:9e:95:e5:1b:a4:33:95:ff:56:20:c8:82:e0:5b:e2:49:df:
c9:ff:66:15:2e:63:40:c6:2c:1b:07:71:52:91:c5:8d:46:af:
7b:31:de:42:31:df:72:e0:77:9a:3a:be:fa:79:68:d4:64:f6:
5f:a8:24:3c:a1:c5:1d:ec:21:7a:f1:b7:85:77:24:d9:9e:24:
ca:b8:ea:21:e9:8f:61:29:14:a2:7e:2d:07:cf:3a:17:04:c8:
a8:2e:50:97:0e:c8:2d:34:5f:79:28:cb:df:f1:ab:11:a5:a4:
28:f1:02:9b:5a:f5:58:d1:4f:6a:32:29:ea:35:c5:21:e2:2c:
4a:51:9c:f3:bf:e0:f1:d6:f2:72:c0:c0:ff:53:b5:bc:ee:b3:
25:4c:71:6b:00:f9:4b:76:3f:c9:51:a7:4b:4b:ae:42:ca:75:
54:86:53:ee:28:e9:1e:54:f6:d5:7b:0f:9b:2c:2f:5b:55:b8:
6e:f9:cf:12:d7:1d:50:3b:7c:26:db:0f:fb:2f:76:33:af:2d:
8a:96:44:7f:8a:35:74:93:07:7d:52:3b:f4:89:62:13:79:d6:
1b:bf:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:59 2025 by rpki-client