Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: Uf1m0HQbMt+FAIpe7mFOX3O/qTRVhidromjC51OxPD4=
Subject key identifier: 8E:79:50:14:4E:F0:E8:34:72:4F:21:30:1F:38:AE:AF:22:4A:85:7B
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 019A71B8D163766E98CF1ADFE9B50D9F1C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: /mtAAfPmegPKkm0XrcnpnaYVOA3g7urC9tHWVbKrVHw=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d1:63:76:6e:98:cf:1a:df:e9:b5:0d:9f:1c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=8e7950144ef0e834724f21301f38aeaf224a857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:ae:4e:d5:b6:87:86:16:e1:87:94:1c:75:
14:92:da:af:b4:69:ff:c8:9b:fe:cb:c1:b3:8d:ca:
d6:16:b8:39:42:a4:c4:f4:14:88:ae:19:13:a4:b7:
6f:dc:1f:dd:f2:67:d3:35:12:f7:17:b8:f3:60:c9:
26:20:dd:bd:9d:32:05:59:e5:27:69:4b:91:fd:af:
da:ec:8f:ba:49:1e:f2:3d:44:24:52:15:4f:18:c4:
3d:ab:22:13:fc:5d:11:18:e5:31:df:1e:15:7a:f4:
67:56:29:43:02:64:95:3d:b6:06:aa:6c:8f:ed:d5:
79:14:6d:1e:7a:c9:ff:8c:d0:70:38:96:2f:db:fe:
9e:87:50:be:c1:ce:73:a5:37:4b:19:32:c7:4a:ac:
12:80:0f:8f:76:ba:96:a3:05:ce:c2:67:31:96:95:
3b:5a:79:15:bc:2f:7d:60:f8:5d:ea:b0:bb:7a:79:
f8:46:70:4a:ff:7e:e6:88:60:52:4f:85:c0:7d:08:
59:49:ad:69:64:a7:74:85:6e:b2:6a:fd:21:b6:b4:
9b:ee:70:25:6a:aa:03:89:04:44:ec:2f:03:c5:4b:
64:b3:7a:bd:90:a1:9c:af:29:8d:94:ad:96:54:ad:
7a:56:3a:90:d5:3d:7a:96:ba:19:9e:b6:04:a4:f6:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:50:14:4E:F0:E8:34:72:4F:21:30:1F:38:AE:AF:22:4A:85:7B
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:81:3d:9e:a0:23:a6:5f:f5:f8:05:24:1c:71:e8:3f:02:62:
97:ba:98:8a:4b:ab:a4:0f:93:6a:72:5c:58:09:d8:4c:75:af:
af:95:81:1d:b2:59:17:40:ae:99:ad:ab:cb:5e:c4:9e:40:78:
12:74:09:5c:ab:42:04:79:f3:4c:8f:8b:27:17:a7:a0:25:17:
13:84:99:50:4a:53:2b:22:53:17:aa:75:5b:5d:5b:45:0f:18:
56:c3:be:b6:5a:ea:0e:0b:f8:ec:25:94:3e:b4:a5:fb:9e:be:
b0:4d:f0:25:04:e0:26:6b:b2:62:3d:ab:8b:b9:6e:d2:69:66:
a9:eb:84:44:f3:a5:6f:a0:25:67:8a:1b:35:be:5b:28:43:61:
05:03:a8:ea:01:b7:d7:5a:df:99:1a:cd:f4:94:8f:6e:80:f8:
87:ea:f4:e7:6d:9b:56:0d:07:dd:a9:2a:22:9e:ee:93:b3:a0:
95:2f:ef:03:57:8d:ab:a2:f0:4f:f8:a7:cc:52:5b:d8:ce:1c:
2f:6d:9f:5b:7d:40:1e:06:f1:fc:64:f7:98:d5:0c:64:6b:00:
98:81:b6:0c:99:cf:09:0e:23:23:c5:9c:d0:c1:ec:5f:7b:80:
0a:90:cd:3b:90:1f:f0:68:8c:6c:e4:e8:14:f3:3b:7b:58:d3:
3f:0e:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:44 2025 by rpki-client