Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
File: 5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft (raw, json)
Hash identifier: Yv2MbCr3M+jnGKmZSUUncIUuxazb7J+qEsXqQEozmoA=
Subject key identifier: 1C:BE:ED:0A:DD:C2:08:18:3C:5E:D8:5B:1C:4D:0E:3E:2E:7F:D9:FA
Authority key identifier: E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9
Certificate issuer: /CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
Certificate serial: 019A725C867A683B06D55FEA56E7DBEA3C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
Manifest number: 0114
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: 5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl (hash: 6J8RpI1GJGUyftr8yi6hSaEsbzJ9CEA/N/7uCJCeh78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:86:7a:68:3b:06:d5:5f:ea:56:e7:db:ea:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=1cbeed0addc208183c5ed85b1c4d0e3e2e7fd9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:39:94:91:fb:b3:73:76:1d:cb:46:ff:bf:
b3:98:67:17:02:72:d4:67:28:bb:a2:d4:db:44:79:
c6:ca:3c:48:97:50:5b:0f:2c:85:c5:7b:3c:c3:28:
ca:cc:35:a1:62:25:49:7c:b8:c7:59:0e:67:83:f2:
3c:c5:5e:e0:e4:b7:fa:05:e1:aa:8a:ca:c3:74:a6:
01:09:ee:17:b8:f9:e5:52:5a:1b:c7:26:33:31:ef:
bb:36:a8:8b:d8:7c:29:0b:d4:86:dc:9e:dc:2a:d0:
c6:a6:67:e5:da:c5:11:7a:61:4c:ec:ca:c7:e6:6f:
33:e9:91:f9:15:60:a2:29:45:04:20:99:7f:28:4c:
a6:6d:78:fa:e5:4f:eb:97:37:e0:24:c2:d7:0b:1a:
8c:6f:34:6a:51:12:09:0e:75:dc:70:7a:9e:f7:f5:
96:87:52:57:6c:3f:be:1d:e4:0b:19:6d:b0:c4:dd:
c6:15:fc:61:d5:ac:13:e5:15:ea:fb:56:65:78:ec:
c7:71:14:e6:c3:9a:a9:c6:70:06:cb:55:58:33:08:
fd:4d:30:47:ee:e1:46:0a:db:3e:55:0a:64:f5:b0:
28:35:95:f7:cc:1b:79:75:26:f2:48:73:98:8a:52:
51:18:76:ae:fa:b3:fc:c5:b3:10:04:ce:8d:ed:25:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:ED:0A:DD:C2:08:18:3C:5E:D8:5B:1C:4D:0E:3E:2E:7F:D9:FA
X509v3 Authority Key Identifier:
keyid:E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:0d:23:7b:fe:c8:3b:be:f6:1b:ce:22:42:c2:b4:3d:82:
39:b2:1d:f7:20:a6:8d:69:8d:02:c7:25:60:dd:b9:36:e7:4c:
6e:32:5d:74:e0:21:1a:bc:81:44:d0:bc:7e:ed:ee:a5:97:5a:
43:24:56:b0:2e:30:66:df:0d:02:6e:cb:6f:96:b0:22:ee:37:
05:b9:43:b5:ab:59:83:13:c8:30:7c:c5:44:1b:c3:1c:c4:e0:
56:e6:df:eb:73:ed:b2:b2:74:34:8b:bc:a0:90:41:ac:4c:b9:
f6:94:c4:03:2c:db:6b:b9:4e:a0:a9:43:84:63:4d:31:f5:73:
af:a2:b8:65:e2:bd:a0:72:55:36:1e:50:a6:95:81:28:88:d8:
8c:24:83:83:8d:6f:9b:2d:37:67:29:ba:0f:aa:31:c7:12:91:
f3:f0:87:f6:da:c1:81:5c:d4:d1:f8:4f:4e:d0:d9:19:d5:e4:
c9:fe:7d:d9:f8:ce:d7:62:44:b0:db:c8:f2:3a:42:f0:ae:a9:
0f:ad:36:84:92:ce:1a:84:9f:f3:98:49:19:67:da:80:de:d3:
4a:aa:f4:8b:84:fb:47:f6:69:bc:4e:ac:a2:ae:52:3a:e7:92:
d3:2a:9c:26:0a:da:71:88:f0:c7:47:66:e3:24:ad:ba:20:e4:
50:d7:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client