Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: llEJYnqk7B9CUtiq7x0JuhOUkp8eMmKNYWcKHwSAXu8=
Subject key identifier: 01:29:01:F1:DA:36:31:A3:F0:92:BE:CD:82:3B:A0:75:E4:B1:22:DC
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019A7112E444292620A31323255416089763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 1565
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: T9vpbsMdFi+81Po5w4JvLuomnAoGXiNT6zcQUQcw5xc=)
2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e4:44:29:26:20:a3:13:23:25:54:16:08:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=012901f1da3631a3f092becd823ba075e4b122dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:44:53:db:78:44:d3:c9:7e:35:35:97:39:
76:29:0a:4a:9e:7d:5e:8a:16:00:d1:f3:8d:5b:86:
61:e7:bf:95:d2:d7:fe:78:64:99:26:d0:78:36:13:
8e:d3:e3:3c:11:e1:5a:d9:e3:42:b6:f2:98:14:35:
bd:09:81:7a:8e:3d:0f:77:22:b6:2e:8a:a0:4a:7d:
1b:0e:b8:72:d4:8f:c1:44:7a:31:e7:42:3f:5e:79:
82:b3:67:74:64:64:a4:83:c4:45:a8:ea:42:63:36:
c6:9d:c7:09:8c:a0:7e:7c:43:26:1f:16:ee:cf:0b:
7d:38:96:c6:1b:b5:a4:bb:23:81:d9:4a:81:85:4f:
5e:3e:d6:24:d1:d8:52:f5:41:9e:3f:f8:d5:3e:81:
d7:88:17:36:cc:43:42:c8:42:ae:ec:72:2a:df:ae:
4a:d7:dd:07:cb:34:9f:3e:f0:c0:19:4f:79:99:d4:
2b:b5:54:b6:ef:aa:3a:19:79:0c:53:ec:b2:36:57:
76:d6:28:07:6d:14:88:e8:ee:b4:f6:c8:b6:d3:d2:
20:c7:12:ef:d7:29:9f:a6:70:a7:08:51:be:b9:06:
24:6c:8a:85:35:75:a6:1e:c7:a1:32:40:df:04:5f:
f4:55:b4:3c:36:85:92:64:7b:2b:1c:72:60:ec:5e:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:01:F1:DA:36:31:A3:F0:92:BE:CD:82:3B:A0:75:E4:B1:22:DC
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:03:e4:32:3d:2b:46:47:20:41:6b:d3:64:99:ca:56:25:83:
cf:f5:99:78:84:c1:92:27:27:ce:ef:50:4f:2b:5b:9c:c6:8b:
01:49:03:7f:2a:f0:cb:9f:d4:b5:7b:25:3e:81:74:72:22:5a:
26:d3:8a:44:6f:0d:42:4f:2f:db:05:0e:94:64:9a:64:4f:54:
37:50:77:d4:48:0e:a0:27:6a:07:bd:3f:a9:1b:52:09:63:ae:
12:05:59:49:af:36:e2:d7:c4:d4:91:ef:01:3c:81:f7:f7:56:
ab:3e:3b:83:8a:70:81:ee:5a:20:de:72:19:ca:8f:95:91:f1:
ce:a0:0a:24:0f:cd:de:63:16:e6:b5:df:f3:16:de:0d:68:90:
56:06:f8:17:52:98:82:0c:8e:d6:4c:9c:c1:03:75:29:18:63:
13:50:81:b2:a3:04:a4:60:14:1f:bd:94:45:4b:91:4d:48:a8:
a5:2c:e4:88:c4:25:0d:dd:f8:b3:7b:d9:41:0b:c0:09:1b:2a:
88:3a:e8:06:40:09:a1:74:a2:61:5a:c8:65:59:1f:08:3b:ee:
bb:e4:9b:54:e9:11:d0:8b:27:af:8f:b3:c4:0c:02:23:1a:a6:
ff:3a:e5:28:e3:a6:4e:62:62:ea:c0:bb:ab:4b:07:9c:41:46:
a8:ef:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:40 2025 by rpki-client