Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File: 5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier: NLeKLc5QId0dFVN+LUmvngqvj/dzvRzml1+8XNxxi3c=
Subject key identifier: DA:30:E6:AE:7A:61:22:70:8D:F9:DE:06:54:DF:B6:F9:EE:FA:38:4B
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer: /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial: 019A71B82B4367353592FFD7D0B53A5E2752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number: 0B07
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: UEsOhuaSB30GWCXtQRTm87K4c6TTuGeqfIKtjqLAF6A=)
2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2b:43:67:35:35:92:ff:d7:d0:b5:3a:5e:27:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=da30e6ae7a6122708df9de0654dfb6f9eefa384b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:06:07:2a:22:4c:5f:4e:21:3b:73:58:09:
d0:83:cf:30:73:c9:01:00:8b:d8:fb:86:7c:00:ad:
52:0f:7b:cd:b6:e7:e9:5e:50:f2:5c:21:6b:1c:33:
2a:d3:d0:5a:7a:20:4e:b2:7f:f8:75:16:29:5c:94:
7f:2c:5d:ee:8e:e4:1a:93:6f:54:74:1f:98:39:0c:
8f:43:e1:50:ad:1c:e8:f0:fd:17:be:a8:05:a0:e6:
3c:e6:bf:13:1f:b5:3d:f3:36:fc:31:74:f2:43:e1:
7d:6d:b9:71:76:0a:b1:c0:4a:d3:b5:5a:8c:b4:55:
d0:25:8f:f3:8e:ce:e6:45:a3:d5:fd:68:ec:17:a9:
c1:63:cb:c9:fc:41:97:44:02:85:b5:c2:62:db:f0:
93:02:13:dc:79:01:0f:9b:a8:0d:b0:ce:03:93:8f:
6a:bd:1b:2d:7b:2b:36:36:bb:55:70:92:22:7c:65:
95:69:ba:00:03:96:04:18:1b:73:a2:d9:70:20:e4:
d0:6f:fc:0c:53:9b:ea:b5:f2:c9:b8:fc:d4:9b:84:
5e:a4:c2:55:9d:d8:48:c5:74:0e:dc:23:61:d7:4a:
d9:44:40:34:be:dc:ca:39:53:77:45:d9:db:45:f8:
d2:1e:5e:d6:30:11:2a:4c:d4:33:95:a7:17:88:f1:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:E6:AE:7A:61:22:70:8D:F9:DE:06:54:DF:B6:F9:EE:FA:38:4B
X509v3 Authority Key Identifier:
keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:da:36:0a:2c:3d:d1:f9:4b:59:86:7b:b9:37:ce:45:46:
5c:bd:79:92:78:c3:19:27:5a:ac:2f:28:d7:72:30:a4:02:a4:
14:9c:88:8d:26:0e:58:b9:a6:d6:40:27:be:31:a3:e2:cf:66:
dc:cf:60:2e:6d:53:4f:e5:49:8f:7d:14:f8:05:f6:19:3d:f8:
db:73:9c:0d:e5:51:12:ad:18:02:12:e0:e5:a2:72:1b:6a:bf:
5d:37:7f:cf:4c:df:01:dd:87:5e:52:73:e9:03:fa:a0:e7:4c:
b0:6f:27:d8:42:10:36:61:05:b3:c8:8d:0d:48:24:ac:8c:46:
95:49:54:c5:d4:b8:8d:b2:ee:80:84:7e:78:7c:2a:51:f7:20:
2d:fa:27:fc:9b:5f:55:f8:47:f7:c5:3e:6a:ba:19:dc:e6:1e:
65:02:ac:f8:63:c9:56:08:06:68:eb:2a:0e:47:36:42:a5:d1:
61:9a:51:ed:42:1f:10:03:27:5e:99:3c:90:9b:68:ad:5b:d6:
84:be:ad:2c:fb:18:9e:66:c4:7b:08:63:0e:84:7b:79:74:e4:
62:44:1a:51:ff:52:bf:4c:86:1d:3f:68:68:3b:bb:4b:74:ab:
49:06:80:cb:e1:cc:32:45:1f:55:2f:e9:d7:b1:63:36:14:a6:
9f:27:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client